Skip to content

Tags: DragonBe/hibp

Tags

v0.1.1

Toggle v0.1.1's commit message

Unverified

This user has not yet uploaded their public signing key.
Ready for v3 of HIBP API

On July 28, 2019 [an announcement](https://www.troyhunt.com/authentication-and-the-have-i-been-pwned-api/) was made that a key was required to use HIBP service API's. It took me some time to have everything prepared, but now the code is ready to make use of this new requirement.

Because the API key is not (yet) required for searching and validating passwords, we only prepared the code to ensure it is ready to use add the required header.

Once the key becomes mandatory, more tests and examples will be provided.

v0.1.0

Toggle v0.1.0's commit message

Unverified

This user has not yet uploaded their public signing key.
First minor bump for PSR compliance

I've modified the code so now it makes use of PSR 7 request and response interfaces and PSR 18 client interfaces.

This is a first minor bump as we're still backwards compatible without any known breaks, but now completely ready for the future to facilitate any HTTP client interface that implements PSR 18.

Enjoy the improvements.

v0.0.6

Toggle v0.0.6's commit message

Unverified

This user has not yet uploaded their public signing key.
Release v0.0.6

We've updated the package to include:

- Typo fix in the README document (PR #6 by @abiodunsulaiman694)
- Allowing custom options into the HTTP client (PR #7 by @srsbiz)
- Testing against PHP 7.3
- Improving mutation tests on CircleCI

Also read my blog article [A word about my Have I Been Pwned package](https://www.dragonbe.com/2018/12/a-word-about-my-have-i-been-pwned.html) where I explain how this password lookup works behind the scenes and to ensure the audience that no passwords are shared over the wire.

help

Toggle help's commit message

Verified

This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
Merge pull request #8 from DragonBe/dragonbe/updating-ci-cd

Dragonbe/updating CI/CD

v0.0.5

Toggle v0.0.5's commit message

Unverified

This tag is not signed, but one or more authors requires that any tag attributed to them is signed.
v0.0.5 release

Small improvements:
- Increasing MSI score to 100%
- Updating library versions

v0.0.4

Toggle v0.0.4's commit message

Unverified

This tag is not signed, but one or more authors requires that any tag attributed to them is signed.
Release v0.0.4

Some updates provided by @freekmurze to make the project better

- #2 (code improvement): Add missing typehint
- #3 (project improvement): Add editorconfig file
- #4 (project improvement): Add .gitattributes
- #5 (project improvement): Consider adding a changelog

v0.0.3

Toggle v0.0.3's commit message

Unverified

This user has not yet uploaded their public signing key.
Small fix update

There was a problem in counting how many hits a given password had (see #1 for details). It was counting all hits for all hashes returned by [HIBP](https://haveibeenpwned.com), not for the password hash itself.

v0.0.2

Toggle v0.0.2's commit message

Unverified

This user has not yet uploaded their public signing key.
Release v0.0.2

This is a small update:

- Updating `README.md` so it explains how you can use this library
- Added simple use case examples in the `examples/` directory

v0.0.1

Toggle v0.0.1's commit message

Unverified

This user has not yet uploaded their public signing key.
Releasing v0.0.1 of dragonbe/hibp

This is the first release of `dragonbe/hibp`, a composer package that allows you to verify passwords with [@troyhunt](https://twitter.com/TroyHunt)'s email and password breach verification website [Have I Been Pwned?](https://haveibeenpwned.com).

What can you do with this package? Verify a clear text or SHA1 hashed password to HIBP to see if the password has been found in a breach. This is a good way to inform your users to choose another password.