- **status**: review --> in-progress - **Comment**: * Some `allura.tests.functional.test_auth` tests are failing, I believe because `hibp_password_check` is set to true, and test.ini also inherits from development.ini. Perhaps best to set it to false by default? Or could set it to false in test.ini * For consistency, can you rename the config to `auth.hibp_password_check` and put it with the rest of the `auth.*` settings related to accounts & security?
--- ** [tickets:#8274] Add optional HaveIBeenPwned checks for password changes** **Status:** in-progress **Milestone:** unreleased **Created:** Thu Apr 04, 2019 02:43 PM UTC by Kenton Taylor **Last Updated:** Mon Apr 08, 2019 03:47 PM UTC **Owner:** Kenton Taylor --- Sent from forge-allura.apache.org because dev@allura.apache.org is subscribed to https://forge-allura.apache.org/p/allura/tickets/ To unsubscribe from further messages, a project admin can change settings at https://forge-allura.apache.org/p/allura/admin/tickets/options. Or, if this is a mailing list, you can unsubscribe from the mailing list.
