Repository navigation

feat(policies): add password pwned project policy - #13702

Merged

Meldiron merged 20 commits into

mainfrom

feat/password-pwned-policy

Sep 17, 2026

Merged

feat(policies): add password pwned project policy#13702
Meldiron merged 20 commits into
mainfrom
feat/password-pwned-policy

Commits on Sep 15, 2026
- feat(policies): add password pwned project policy
  
  Meldiron
  and
  claude
  committed
  053e693
- feat(policies): configurable pwned policy and anonymous conversion coverage
  
  Meldiron
  and
  claude
  committed
  9f2bc7d
- feat(users): record and expose whether a password is known to be breached
  
  Meldiron
  and
  claude
  committed
  5e95e07
- refactor(users): rename the passwordPwned user attribute to pwned
  
  Meldiron
  and
  claude
  committed
  e28411b
- Revert "refactor(users): rename the passwordPwned user attribute to pwned"
  Meldiron
  committed
  81b6bde
- feat(policies): optional sign-in checks and pwned policy on by default
  
  Meldiron
  and
  claude
  committed
  f559b4a
- test(pwned): assert the k-anonymity guarantee instead of the transport
  
  Meldiron
  and
  claude
  committed
  03bc7c6
- fix(policies): skip the pwned check on outage instead of rejecting
  
  Meldiron
  and
  claude
  committed
  ef1e6ab
- refactor(policies): reduce the pwned policy to three options
  
  Meldiron
  and
  claude
  committed
  4f2e203
- feat(auth): make the pwned lookup adapter driven
  
  Meldiron
  and
  claude
  committed
  84f3c39
- refactor(auth): configure the breach lookup with one DSN
  
  Meldiron
  and
  claude
  committed
  21d36f8
- refactor(auth): drop the adapter layer, let the validator be the validator
  
  Meldiron
  and
  claude
  committed
  eb94af3
- refactor(auth): let the call site read the pwned policy
  
  Meldiron
  and
  claude
  committed
  dfee18d
- refactor(auth): inline the client and unavailable helpers
  
  Meldiron
  and
  claude
  committed
  9209389
- feat(auth): cache breach answers for every validator
  
  Meldiron
  and
  claude
  committed
  4b1246c
- fix(auth): initialise the password validator base in both subclasses
  
  Meldiron
  and
  claude
  committed
  b4669d6
Commits on Sep 16, 2026
- feat(auth): send the pwned service the password with a Bearer token
  
  Meldiron
  and
  claude
  committed
  947dae8
- feat(auth): add a `none` breach validator that reports every password safe
  
  Meldiron
  and
  claude
  committed
  40ead5a
- fix(auth): default the breach service DSN to none
  
  Meldiron
  and
  claude
  committed
  ccf4aea
- Merge branch 'main' into feat/password-pwned-policy
  
  Meldiron
  and
  claude
  committed
  ae93795

Sunbelt Computer Software

PL/B Language Development and Support

Navigation Menu

Repository navigation

feat(policies): add password pwned project policy - #13702

feat(policies): add password pwned project policy#13702
Meldiron merged 20 commits into
mainfrom
feat/password-pwned-policy

Commits on Sep 15, 2026

feat(policies): add password pwned project policy

feat(policies): configurable pwned policy and anonymous conversion coverage

feat(users): record and expose whether a password is known to be breached

refactor(users): rename the passwordPwned user attribute to pwned

Revert "refactor(users): rename the passwordPwned user attribute to pwned"

feat(policies): optional sign-in checks and pwned policy on by default

test(pwned): assert the k-anonymity guarantee instead of the transport

fix(policies): skip the pwned check on outage instead of rejecting

refactor(policies): reduce the pwned policy to three options

feat(auth): make the pwned lookup adapter driven

refactor(auth): configure the breach lookup with one DSN

refactor(auth): drop the adapter layer, let the validator be the validator

refactor(auth): let the call site read the pwned policy

refactor(auth): inline the client and unavailable helpers

feat(auth): cache breach answers for every validator

fix(auth): initialise the password validator base in both subclasses

Commits on Sep 16, 2026

feat(auth): send the pwned service the password with a Bearer token

feat(auth): add a `none` breach validator that reports every password safe

fix(auth): default the breach service DSN to none

Merge branch 'main' into feat/password-pwned-policy