v0.3.0

  * handle CORS request from browsers
  * fixes JSON marshalling
  * kill more Ruby references in readme
  * adds link to frontend in readme

go.mod

@@ -5,6 +5,7 @@ go 1.15
 require (
 	cloud.google.com/go/bigquery v1.10.0
 	github.com/go-chi/chi v4.1.2+incompatible
+	github.com/go-chi/cors v1.1.1
 	golang.org/x/net v0.0.0-20200813134508-3edf25e44fcc // indirect
 	google.golang.org/api v0.29.0
 )

go.sum

@@ -49,6 +49,8 @@ github.com/envoyproxy/go-control-plane v0.9.4/go.mod h1:6rpuAdCZL397s3pYoYcLgu1m
 github.com/envoyproxy/protoc-gen-validate v0.1.0/go.mod h1:iSmxcyjqTsJpI2R4NaDN7+kN2VEUnK/pcBlmesArF7c=
 github.com/go-chi/chi v4.1.2+incompatible h1:fGFk2Gmi/YKXk0OmGfBh0WgmN3XB8lVnEyNz34tQRec=
 github.com/go-chi/chi v4.1.2+incompatible/go.mod h1:eB3wogJHnLi3x/kFX2A+IbTBlXxmMeXJVKy9tTv1XzQ=
+github.com/go-chi/cors v1.1.1 h1:eHuqxsIw89iXcWnWUN8R72JMibABJTN/4IOYI5WERvw=
+github.com/go-chi/cors v1.1.1/go.mod h1:K2Yje0VW/SJzxiyMYu6iPQYa7hMjQX2i/F491VChg1I=
 github.com/go-gl/glfw v0.0.0-20190409004039-e6da0acd62b1/go.mod h1:vR7hzQXu2zJy9AVAgeJqvqgH9Q5CA+iKCZ2gyEVpxRU=
 github.com/go-gl/glfw/v3.3/glfw v0.0.0-20191125211704-12ad95a8df72/go.mod h1:tQ2UAYgL5IevRw8kRxooKSPJfGvJ9fJQFa0TUsXzTg8=
 github.com/go-gl/glfw/v3.3/glfw v0.0.0-20200222043503-6f7a984d4dc4/go.mod h1:tQ2UAYgL5IevRw8kRxooKSPJfGvJ9fJQFa0TUsXzTg8=

main.go

@@ -15,6 +15,7 @@ import (
 	"github.com/audibleblink/passdb/hibp"
 	"github.com/go-chi/chi"
 	"github.com/go-chi/chi/middleware"
+	"github.com/go-chi/cors"
 )
 
 var (
@@ -52,6 +53,9 @@ func main() {
 	r.Use(middleware.RealIP)
 	r.Use(middleware.Logger)
 	r.Use(middleware.Recoverer)
+	r.Use(cors.Handler(cors.Options{
+		AllowedOrigins: []string{"*"},
+	}))
 
 	r.Get("/usernames/{username}", handleUsername)
 	r.Get("/passwords/{password}", handlePassword)
@@ -68,9 +72,9 @@ func main() {
 }
 
 type record struct {
-	Username string
-	Domain   string
-	Password string
+	Username string `json:"username"`
+	Domain   string `json:"domain"`
+	Password string `json:"password"`
 }
 
 type breach struct {

readme.md

@@ -4,8 +4,19 @@ Password-dump database API server. See accompanying
 [blog post](https://sec.alexflor.es/posts/2020/05/password-dump-database-part-2/) 
 for more details.
 
+See also [accompanying frontend](https://github.com/audibleblink/passdb-frontend)
+
 ### Seeding
 
+Torrents:
+```
+# Collection #1
+magnet:?xt=urn:btih:b39c603c7e18db8262067c5926e7d5ea5d20e12e&dn=Collection+1
+
+# Collections #2 - #5
+magnet:?xt=urn:btih:d136b1adde531f38311fbf43fb96fc26df1a34cd&dn=Collection+%232-%235+%26+Antipublic
+```
+
 Dump entries should be in the format:
 
 ```
@@ -24,8 +35,8 @@ Once in the proper format, you can create the table and import the csv using the
 the GCP CLI tool, or from the web portal
 
 This will take a while. You may want to manully upload to GCP Storage and copy in the
-data from there because if the upload fails with Rake, you'll have to start all over,
-and burn through more of your bandwidth.
+data from there because if the upload fails with the GCP CLI, you'll have to start all over,
+and burn through more of your bandwidth (and credits).
 
 ## Usage
 
@@ -49,5 +60,5 @@ Run:
 
 ```bash
 source .env
-go run main.go
+go run main.go [port]
 ```