looplinguist/secure-password-policy

This is used to prevent the use of previously used passwords in Laravel.

v1.0.1 2024-06-11 15:43 UTC

Requires

• php: ^8.0
• illuminate/support: ^10.0|^11.0

MIT

• Shyam

• looplinguist
• secure-password-policy

README

This is used to prevent the use of previously used passwords for Laravel.

Installation

Install using Composer

composer require looplinguist/secure-password-policy

User model

Update the User model to define a relationship with the password_histories table. You can add the following code to the User model:

use Illuminate\Database\Eloquent\Relations\HasMany;
use LoopLinguist\SecurePasswordPolicy\Models\PasswordHistory;

class User extends Authenticatable
{
    //  ... 

    public function passwordHistories(): HasMany
    {
        return $this->hasMany(PasswordHistory::class);
    }
}

Method

Add the following code to the method that handles password changes:

use LoopLinguist\SecurePasswordPolicy\Http\HasPasswordHistory;

 if ((new HasPasswordHistory($request->input('password')))->hasHistory()) {
            return response()->json([
                'message' => 'Password found.'
            ], 409);
        }

Publish the config file with:

php artisan vendor:publish --tag=secure-password-policy-config    

This is the content of the file that will be published in config/secure-password-policy.php

Publish the migrations with:

php artisan vendor:publish --tag=secure-password-policy-migrations    

php artisan migrate