digiservnet/hibp-php

PHP library for accessing the Have I Been Pwned API.

Hi there 👋

hibp-php's Issues

Update to use V3 of HIBP API

According to a (blog post)[https://www.troyhunt.com/authentication-and-the-have-i-been-pwned-api/] by Troy Hunt, the HIBP API is changing and moving to V3 on 18th August 2019. V3 will require a paid for API key to authenticate with to resolve various HIBP abuse issues.

I'll be releasing v4 of this package very shortly which will be the required version to use V3 of the HIBP API.

List on haveibeenpwned.com API consumers list

Having looked through several PHP client libraries for HIBP, I found this to be the best. Would be helpful for others to find it at https://haveibeenpwned.com/API/Consumers. Just need to contact Troy Hunt.

Add Laravel-specific package config

timeout?

if i want to use this library to check partial password hashes, is there an ability to set a timeout so that i can plan for the possibility of this 3rd party api being down?

Missing hibp-api-key

Hi Ian,

just tried to update my extension with your version 5.2 but I get an error while exploring breached sites by email-address.

With $breach = new Breach(new HibpHttp($this->APIKey)) I get:

[2023-04-11 14:08:06] request.CRITICAL: Uncaught PHP Exception GuzzleHttp\Exception\ClientException: "Client error: GET https://haveibeenpwned.com/api/v3/breachedaccount/paul.paulsen%40gmx.net?truncateResponse=false&includeUnverified=false` resulted in a 401 Unauthorized response: { "statusCode": 401, "message": "Access denied due to missing hibp-api-key." } " at /var/www/clients/client1/web31/web/vendor/guzzlehttp/guzzle/src/Exception/RequestException.php line 113 {"exception":"[object] (GuzzleHttp\Exception\ClientException(code: 401): Client error: GET https://haveibeenpwned.com/api/v3/breachedaccount/paul.paulsen%40gmx.net?truncateResponse=false&includeUnverified=false resulted in a 401 Unauthorized response:\n{ "statusCode": 401, "message": "Access denied due to missing hibp-api-key." }\n at /var/www/clients/client1/web31/web/vendor/guzzlehttp/guzzle/src/Exception/RequestException.php:113)"} []`

I have a valid apikey from hibp, but for some reasons, the new version didn´t recognize it?

Any idea what I might have missed?

Cannot upgrade Symfony project to 5.2.x

composer update "symfony/*" --with-all-dependencies
Loading composer repositories with package information
Updating dependencies (including require-dev)
Restricting packages listed in "symfony/symfony" to "5.2.*"
Your requirements could not be resolved to an installable set of packages.

  Problem 1
    - icawebdesign/hibp-php 4.2.3 requires symfony/yaml ^4.4 -> satisfiable by symfony/yaml[v4.4.16] but these conflict with your requirements or minimum-stability.
    - icawebdesign/hibp-php 4.2.3 requires symfony/yaml ^4.4 -> satisfiable by symfony/yaml[v4.4.16] but these conflict with your requirements or minimum-stability.
    - icawebdesign/hibp-php 4.2.3 requires symfony/yaml ^4.4 -> satisfiable by symfony/yaml[v4.4.16] but these conflict with your requirements or minimum-stability.
    - Installation request for icawebdesign/hibp-php (locked at 4.2.3, required as ^4.2) -> satisfiable by icawebdesign/hibp-php[4.2.3].