Server API question - why the /pw endpoint?

easybill / easypwned

offline haveibeenpwned HIBP check and downloader, rest api, easybill

MIT License

25 stars 5 forks source link

Server API question - why the /pw endpoint? #5

Closed tmpfs closed 11 months ago

tmpfs commented 11 months ago

Hi,

Thanks for this, I just used the downloader and it's really useful - I was dreading using the .NET version!

I wonder what the point of exposing an endpoint (/pw) that allows the user to submit a password to query the database is? I can't think of a valid reason for this and from my PoV it would make sense to only offer the hashed endpoint or am I missing something?

timglabisch commented 11 months ago

it's just for quick testing. you should best use post + hash.