Leaked passwords API

Description

API for checking if a password is leaked in breaches. Uses HIBP API.

ADR

ADR-001: Storage Strategy for Pwned Password Dataset

Development

APP_ENV=development go run src/main.go

Running in a Docker container

docker build -t pwned-api .
docker run --env-file .env.development -e APP_ENV=development -e RUNNING_IN_DOCKER=true -p 8080:8080 pwned-api

Want to see it in action with the Spring authorization server?

Go to this Github repo and follow readme.

Example CURL

curl -X POST http://localhost:8080/check \
  -H "Content-Type: application/json" \
  -d '{"password": "movies15"}'