Integrate Have I Been pwned to password checks
-
Check the password against Have I Been pwned and return an appropriate error -
Add configuration options to allow enabling/disabling the functionality -
Expose the configuration to the configuration endpoint -
[Front-End] Retrieve configuration -
[Front-End] Display a warning in front-end about passwords being partly sent to Have I Been pwned. -
[Front-End] Handle error when password is found in Have I Been pwned database in front-end
Optional:
-
Check the email against Have I Been pwned (and return an appropriate warning ?) -
[Front-End] Display an information in front-end about emails being sent to Have I Been pwned. -
[Front-End] Handle warning when email is found in Have I Been pwned database.
Modules
Edited by Thomas