💻 hibp %pw%

#!/usr/bin/env bash

password=$1

getPassword(){
	if [ -z "$password" ]
	then
		clear
		printf "$(figlet "HAVE I BEEN PWNED")\n--------------------------------\n\n"
		echo "Password to lookup:"
		read -r password
fi
}

getHash(){
	hash=$(echo -n "$password" | openssl sha1)
	hash=${hash:9}
	range=${hash:0:5}
	remainder=${hash:6}
}

apiRequest(){
	apiUrl="https://api.pwnedpasswords.com/range/$range"
	filename="$PWD/.pwned.hash"
	results=$(curl -s "$apiUrl" > "$filename" && grep -i "$remainder" "$filename")
	noTimes="${results:36}"
	if [ -z "$results" ]
	then
		clear
		printf "$(figlet "NOT PWNED")\n--------------------------------\n\n"
		printf "Keep up the good work!"
	else
		clear
		printf "$(figlet "YOU HAVE BEEN PWNED")\n--------------------------------\n\n"
		printf "Ouch...!\nThe password you input has been leaked!\n\nTimes found: $noTimes\nYou might want to change that!\n\n"
		newPassword
	fi
}

clean(){
	rm "$filename"
}

newPassword(){
	PASSWORD=$(openssl rand -base64 32)
	echo "${PASSWORD%??}" | xclip -selection c
	echo "A new random password has been copied to your clip board."
}
getPassword
getHash
apiRequest
clean