acodeninja/laravel-pwned-passwords-validator

Validation package that checks Pwned Passwords to validate passwords https://haveibeenpwned.com/Passwords

v1.0.1 2018-03-15 11:41 UTC

Requires

• guzzlehttp/guzzle: ^6.3

Requires (Dev)

• orchestra/testbench: ^3.6

MPL-2.0

• Lawrence

README

Develop Master

Validate that a given string is not present in the pwned passwords list at https://haveibeenpwned.com/Passwords

Installation

Install using composer from packagist

composer require acodeninja/laravel-pwned-passwords-validator

Usage

Use as you would any other validation rule

In a request

/**
 * Get the validation rules that apply to the request.
 *
 * @return array
 */
public function rules()
{
    return [
        'email' => 'required|email|unique:users,email',
        'password' => 'required|pwned_password_strict',
    ];
}

In a controller

$validator = Validator::make($request->all(), [
    'email' => 'required|email|unique:users,email',
    'password' => 'required|pwned_password_strict',
])->validate();