Add Rule for passwords listed on haveivebeenpwnd - Githubissues

vt-middleware / passay

Password policy enforcement for Java.

http://www.passay.org

Other

275 stars 63 forks source link

Add Rule for passwords listed on haveivebeenpwnd #146

Closed elektro-wolle closed 1 year ago

elektro-wolle commented 1 year ago

The rule should have the following configuration-parameters:

URL to use (for local installed database)
timeout
failOnTimeout (should passwords be required to be checked against the service, even if the service is not available)
allowFoundPasswords (don't know, if this is possible: Display a warning, that the password is easy to guess)

I'll issue an according PR with a sample implementation in the next days.