Have I Been Pwned, ruby style

ruby_pwned.rb

#!/usr/bin/env ruby

require 'net/http'
require 'digest'

url = 'https://api.pwnedpasswords.com/range'

input = ARGV[0] ? ARGV : ARGF.read.split

input.each do |pw|
  password = pw.chomp

  sha1 = Digest::SHA1.hexdigest(password).upcase
  sha1_prefix = sha1[0..4]
  sha1_suffix = sha1[5..-1]

  uri = URI("#{url}/#{sha1_prefix}")

  Net::HTTP.start(uri.host, uri.port,
    :use_ssl => uri.scheme == 'https') do |http|

    request = Net::HTTP::Get.new uri

    hashes = http.request(request).body
    found = hashes.split.find { |suffix| suffix.start_with?(sha1_suffix) }

    if found
      puts "UH OH! Found #{password} #{found.split(':')[1]} times"
    else
      puts "#{password} is safe"
    end
  end
end