2024-03-12 20:59:07 +01:00
|
|
|
// SPDX-FileCopyrightText: 2021-2024 Winni Neessen <wn@neessen.dev>
|
|
|
|
|
//
|
|
|
|
|
// SPDX-License-Identifier: MIT
|
|
|
|
|
|
2024-03-12 19:00:21 +01:00
|
|
|
package apg
|
|
|
|
|
|
|
|
|
|
import (
|
|
|
|
|
"time"
|
|
|
|
|
|
|
|
|
|
"github.com/wneessen/go-hibp"
|
|
|
|
|
)
|
|
|
|
|
|
|
|
|
|
// HasBeenPwned checks the given password string against the HIBP pwned
|
|
|
|
|
// passwords database and returns true if the password has been leaked
|
|
|
|
|
func HasBeenPwned(password string) (bool, error) {
|
|
|
|
|
hc := hibp.New(hibp.WithHTTPTimeout(time.Second*2),
|
|
|
|
|
hibp.WithPwnedPadding())
|
|
|
|
|
matches, _, err := hc.PwnedPassAPI.CheckPassword(password)
|
|
|
|
|
return matches != nil && matches.Count != 0, err
|
|
|
|
|
}
|
