Pwned Passwords for ABAP
Pwned Passwords for ABAP
Pwned Passwords implementation for ABAP
Built and tested with ABAP 7.52 SP01, but should work with any releases >= 7.50
Simple ABAP wrapper for the Pwned Passwords API V3 REST API provided by Troy Hunt.
The SSL Certificates for https://api.pwnedpasswords.com/ must be added to STRUST before the API can be called.
The abapGit SSL Setup Guide provides the steps to do this.
Use the certificate from https://api.pwnedpasswords.com/ instead of GitHub
DATA(pwn_passwords) = zcl_pwned_passwords=>create( ).
" Check if password has been Pwned:
DATA(password) = ||.
cl_demo_input=>request(
EXPORTING text = 'Enter Password:'
CHANGING field = password ).
DATA(is_pwned) = pwn_passwords->is_password_pwned( i_password = password ).
cl_demo_output=>display(
EXPORTING
data = |{ COND #( WHEN is_pwned = abap_true THEN 'Password is PWNED' ELSE 'Password is safe...for now' ) }|
name = 'IS_PWNED' ).
" Check if password has been Pwned and get details:
DATA(pwned_password_details) = pwn_passwords->get_password_status( i_password = password ).
cl_demo_output=>display(
EXPORTING
data = pwned_password_details
name = 'PWNED_PASSWORD_DETAILS' ).