Leaked passwords API

Description

API for checking if a password is leaked in breaches. Uses HIBP API.

ADR

ADR-001: Storage Strategy for Pwned Password Dataset

Development

make deps
make build
make run

Running in a Docker container

docker build -t pwned-api .
docker run -e GIN_MODE=release -e APP_ENV=development -p 8080:8080 pwned-api

Want to see it in action with the Spring authorization server?

Go to this Github repo and follow readme.

Example CURL requests

curl -X POST http://localhost:8080/check \
  -H "Content-Type: application/json" \
  -d '{"password": "movies15"}'

curl GET http://localhost:8080/internal/debug/byHash/00009411E320E3BC9F2E0FD3AA3CD965C0C194FC
-H "Content-Type: application/json"