First final release
This is the first stable release for the HaveIBeenPwned module. This includes
- Check passwords against HIPB on login
- Check passwords before changing and block known breached passwords
- Give the user information about what happens
- Force register the Validator for passwords
- A bit of documentation
- A cow
- Dev mode won't trigger a pwned password (because we love devs)
- Disable the check temporarily if needed
- Informational message in the CMS
- Breach-count in the CMS if breaches are found
- Breaches that contain the user's email address, to help them make informative decisions
- Aggressive locking out
- It sounds bad, but it's for the better.