Skip to content

Lookup in Have I Been Pwned? database #904

Open

Description

@Ryuno-Ki

This came up in #893 (comment)

Basically, the check in /lib/requests/create-account-request.js#L134 could be extended by looking the email up in Troy Hunt's database. There are packages to do this.

Some measures were already taken in #859 it seems.

If you would want to go fancy, you could look at WebAuthn API :-D

Activity

  1. assigned and unassigned on Nov 5, 2018
  2. added
    priority-lowto be used for lower priority issues and pull requests
    and removed
    triageIssues that need team review
    on Nov 6, 2018
  3. kjetilk commented on Apr 1, 2019

    @kjetilk
    Member

    We did this, didn't we?

  4. Ryuno-Ki commented on Apr 2, 2019

    @Ryuno-Ki
    Author

    Can't tell. I'm currently not following along but only with the (plenty of) issues around solid :-(

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    priority-lowto be used for lower priority issues and pull requests

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions