[issue2551171] Add support for have I been powned password checking/email address

New submission from John Rouillard:

Somebody asked if Roundup supported Have I been Powned (https://haveibeenpwned.com/)
using the password API:

  https://haveibeenpwned.com/API/v3

It doesn't but along the lines of https://wiki.roundup-tracker.org/TestPasswordComplexity
a similar mechanism can use:

 https://pypi.org/project/pyhibp/

to get a password check.

Also adding support for specifying an API key (https://haveibeenpwned.com/API/Key) in:

  detectors/config.ini

for the tracker allows use of checks for the email address(es) of the user that can be
done in a detector.

----------
components: Web interface
keywords: Effort-Low, StarterTicket
messages: 7371
nosy: rouilj
severity: normal
status: new
title: Add support for have I been powned password checking/email address
type: security

_________________________________________________
Roundup tracker <[email protected]>
<https://issues.roundup-tracker.org/issue2551171>
_________________________________________________