PasswordCheck 1.0.1

IBreachedPasswordService calls the HIBP (haveibeenpwned.com) range search API and returns the number of times a password has appeared in a known data breach.

Install

Install-Package PasswordCheck

Configure

The simplest configuratation is to use the AddBreachedPasswordService extension method:

public void ConfigureServices(IServiceCollection services)
{
    services.AddBreachedPasswordService();
}

Alternatively, if you want greater control over configuring the HttpClient used by BreachedPasswordService:

public void ConfigureServices(IServiceCollection services)
{
    services.AddScoped<IBreachedPasswordService, BreachedPasswordService>();
    services.AddHttpClient<IBreachedPasswordService, BreachedPasswordService>(client =>
    {
        client.BaseAddress = new Uri("https://api.pwnedpasswords.com");
    }).AddPolicyHandler(GetHibpHttpPolicy());
}

Use

You can then use IBreachedPasswordService to check passwords.

var breachCount = await _breachedPasswordService.GetBreachCountAsync(password);