philnash / pwned

😱 An easy, Ruby way to use the Pwned Passwords API.

Home Page:https://rubygems.org/gems/pwned/

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Support gzip/brotli compressed responses

philnash opened this issue · comments

The PwnedPasswords API will return gzipped or brotli encoded content if asked for it.

Currently the library will accept any headers passed through. If a user were to pass headers: { "Accept-Encoding" => "br" } the library would faithfully request the encoded response and then fail to do anything with it.

Thoughts:

  • No need to require any extra gems
    • can use Zlib to reflate gzip responses
    • if someone requests brotli, expect for them to have included a brotli supporting gem