express-pwnd-pw

Express.js security middleware for checking user password safety with Have I Been Pwned (HIBP) API.

INSTALL

npm i express-pwnd-pw

Or find help from:

• https://www.npmjs.com/package/express-pwnd-pw
• https://github.com/BlueT/express-pwnd-pw

SYNOPSIS

"use strict";
var express = require('express');
var app = express();
var pwndPw = require('express-pwnd-pw');
 
app.use(pwndPw());	// use default settings
 
app.post('/foo', function (req, res) {
    if (Object.keys(req.pwndPw) > 0) {
        // It's a popular password! (rock)
    }
    res.send('Hello World!');
});
 
app.get('/bar', function (req, res) {
    // ...
    let vuln = pwndPw.password('12345');
    if (Object.keys(vuln) > 0) {
        // It's a popular password! (rock)
    }
})
 
app.listen(3000);

Middleware

"use strict";
var express = require('express');
var app = express();
var pwndPw = require('express-pwnd-pw');
 
app.use(pwndPw());	// use default settings
 
app.post('/foo', function (req, res) {
    if (Object.keys(req.pwndPw) > 0) {
        // It's a popular password! (rock)
        // { '8cb2237d0679ca88db6464eac60da96345513964': 2333232 }
    }
    res.send('Hello World!');
});
 
app.listen(3000);

Helper Functions

password()

var pwndPw = require('express-pwnd-pw');
 
let vuln = pwndPw.password(['12345', '67890']);
if (Object.keys(vuln) > 0) {
    // It's a popular password! (rock)
    // {
    // 	'8cb2237d0679ca88db6464eac60da96345513964': 2333232,
    // 	'230991abcd77e8173edb0af392e1f11120051e29': 6638
    // }
}
 

Contribute

PRs welcome!
If you use/like this module, please don't hesitate to give me a Star. I'll be happy whole day!

Hope this module can save your time, a tree, and a kitten.