package auth

import "strings"

// Small denylist of common weak passwords (case-insensitive compare).
var commonPasswords = map[string]struct{}{
	"password":         {},
	"password123":      {},
	"password1234":     {},
	"12345678901234":   {},
	"qwertyuiopasdf":   {},
	"admin":            {},
	"adminadmin":       {},
	"letmein":          {},
	"welcome":          {},
	"welcome123":       {},
	"changeme":         {},
	"changeme123":      {},
	"cluster canvas":   {},
	"clustercanvas":    {},
	"correct horse battery staple": {},
}

func isCommonPassword(password string) bool {
	normalized := strings.ToLower(strings.TrimSpace(password))
	_, found := commonPasswords[normalized]
	return found
}