This library implements the HaveIBeenPwned.org's Pwned Passwords v3 API in Go.
Features:
- No external dependencies to reduce the likelihood of supply-chain attacks.
- Cache support, as API responses can sometimes be huge.
- Concurrent request optimization. Sharing a single request for password hash prefix.
- Efficient memory use, no large allocations.
Example:
import (
"github.com/supabase/hibp"
)
func main() {
pwnedClient := hibp.PwnedClient{
// please always set a User-Agent identifying your project
UserAgent: "my-super-cool-project",
}
isPwned, err := pwnedClient.Check(context.Background(), "password1")
if err != nil {
if ur, ok := err.(*hibp.ErrorUnknownResponse); ok {
// any non-200 response available in ur.Response
}
panic(err)
}
fmt.Print("Your password is ")
if isPwned {
fmt.Print("pwned!\n")
} else {
fmt.Print("safe for now!\n")
}
}Maintained by the Auth team at Supabase. Licensed under the MIT License.