{"id":18265768,"url":"https://github.com/tdgroot/magento2-module-pwned-validator","last_synced_at":"2025-07-04T07:35:23.615Z","repository":{"id":57069967,"uuid":"124745646","full_name":"tdgroot/magento2-module-pwned-validator","owner":"tdgroot","description":"Add 'Have I been pwned?' validation to Magento 2.","archived":false,"fork":false,"pushed_at":"2020-05-17T20:57:26.000Z","size":11,"stargazers_count":7,"open_issues_count":0,"forks_count":2,"subscribers_count":1,"default_branch":"master","last_synced_at":"2025-04-04T21:40:15.590Z","etag":null,"topics":["magento2","magento2-module","pwned","pwnedpasswords","validator"],"latest_commit_sha":null,"homepage":"","language":"PHP","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/tdgroot.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2018-03-11T10:30:10.000Z","updated_at":"2020-05-08T09:37:02.000Z","dependencies_parsed_at":"2022-08-24T14:54:19.763Z","dependency_job_id":null,"html_url":"https://github.com/tdgroot/magento2-module-pwned-validator","commit_stats":null,"previous_names":[],"tags_count":2,"template":false,"template_full_name":null,"purl":"pkg:github/tdgroot/magento2-module-pwned-validator","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tdgroot%2Fmagento2-module-pwned-validator","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tdgroot%2Fmagento2-module-pwned-validator/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tdgroot%2Fmagento2-module-pwned-validator/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tdgroot%2Fmagento2-module-pwned-validator/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tdgroot","download_url":"https://codeload.github.com/tdgroot/magento2-module-pwned-validator/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tdgroot%2Fmagento2-module-pwned-validator/sbom","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":263469457,"owners_count":23471529,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["magento2","magento2-module","pwned","pwnedpasswords","validator"],"created_at":"2024-11-05T11:19:41.685Z","updated_at":"2025-07-04T07:35:23.591Z","avatar_url":"https://github.com/tdgroot.png","language":"PHP","funding_links":[],"categories":[],"sub_categories":[],"readme":"# Magento 2 Have I Been Pwned Validator\nThis module adds a validator which checks if the submitted password is found in public databases using the `Have I Been Pwned?` service.\n\n## Security\nThere are no security drawbacks, because there are no actual passwords being submitted over the internet. This is possible by hashing the password using the `SHA-1` algorithm and request all hashes in the `Have I been Pwned?` databases starting with the first 5 characters of the password hash. This resultset contains a list of hashes and the amount of occurrences.\n\nThis way the password stays inside the Magento process.\n\n## Installation\n```\ncomposer require timpack/magento2-module-pwned-validator\nbin/magento setup:upgrade\n``` \n\n## Configuration\nYou can configure the threshold of the validator, at which count of occurrences in the resultset the password should be considered insecure/invalid.\nThis configuration can be found at:\n\n`Stores -\u003e Configuration -\u003e Customer -\u003e Customer Configuration -\u003e Pwned Validator -\u003e Minimum amount of matches`\n\n## Credits\nThis module was heavily inspired by Valorin's Pwned validator written for Laravel: [valorin/pwned-validator](https://github.com/valorin/pwned-validator)","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Ftdgroot%2Fmagento2-module-pwned-validator","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Ftdgroot%2Fmagento2-module-pwned-validator","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Ftdgroot%2Fmagento2-module-pwned-validator/lists"}