search

valorin / pwned-validator

Super simple Laravel Validator for checking password via the Pwned Passwords service of Have I Been Pwned
MIT License
383 stars 24 forks source link

I have a question #13

Open myles800 opened 4 years ago

myles800 commented 4 years ago

I tried to implement the HIBP rule, but when I use this rule (pwned:300) and I try to use this password (password) then it does not give me an error. Can you help me?

myles800 commented 4 years ago

I tried to implement the HIBP rule, but when I use this rule (pwned:300) and I try to use this password (password) then it does not give me an error. Can you help me?

valorin commented 4 years ago

Can you please paste your full validator block in here? Also, what form is it for, and do the other validators display the errors?

You could test the validator is working by setting something like max:3 on the password and typing a 4+ character password into the box. It should reject it based on string length and show the error.