Class HaveIBeenPwnedRestApiReactivePasswordChecker
java.lang.Object
org.springframework.security.web.authentication.password.HaveIBeenPwnedRestApiReactivePasswordChecker
- All Implemented Interfaces:
org.springframework.security.authentication.password.ReactiveCompromisedPasswordChecker
public class HaveIBeenPwnedRestApiReactivePasswordChecker
extends Object
implements org.springframework.security.authentication.password.ReactiveCompromisedPasswordChecker
Checks if the provided password was leaked by relying on
Have I Been Pwned REST
API. This implementation uses the Search by Range in order to protect the value of
the source password being searched for.
- Since:
- 6.3
-
Constructor Summary
Constructors -
Method Summary
Modifier and TypeMethodDescriptionreactor.core.publisher.Mono<org.springframework.security.authentication.password.CompromisedPasswordDecision>voidsetWebClient(org.springframework.web.reactive.function.client.WebClient webClient) Sets theWebClientto use when making requests to Have I Been Pwned REST API.
-
Constructor Details
-
HaveIBeenPwnedRestApiReactivePasswordChecker
public HaveIBeenPwnedRestApiReactivePasswordChecker()
-
-
Method Details
-
check
public reactor.core.publisher.Mono<org.springframework.security.authentication.password.CompromisedPasswordDecision> check(String password) - Specified by:
checkin interfaceorg.springframework.security.authentication.password.ReactiveCompromisedPasswordChecker
-
setWebClient
public void setWebClient(org.springframework.web.reactive.function.client.WebClient webClient) Sets theWebClientto use when making requests to Have I Been Pwned REST API. By default, aWebClientwith a base URL ofAPI_URLis used.- Parameters:
webClient- theWebClientto use
-