SPRING_BOOT_EXAMPLE.md

Spring Boot 接入示例

import dev.flyfish.passguard.PassGuard;

import org.springframework.context.annotation.Bean;
import org.springframework.context.annotation.Configuration;

@Configuration
class PasswordSecurityConfiguration {
    @Bean
    PassGuard passGuard() {
        return PassGuard.builder()
            .contextWords("your-company", "your-product")
            .build();
    }
}

在领域服务而不是仅在 Controller/Bean Validation 中执行：

import dev.flyfish.passguard.PassGuard;
import dev.flyfish.passguard.PasswordAssessment;
import dev.flyfish.passguard.PasswordContext;

import java.util.Collections;

import org.springframework.stereotype.Service;

@Service
class RegistrationService {
    private final PassGuard passGuard;
    private final PasswordHasher passwordHasher; // 你的 Argon2id 封装

    RegistrationService(PassGuard passGuard, PasswordHasher passwordHasher) {
        this.passGuard = passGuard;
        this.passwordHasher = passwordHasher;
    }

    public User register(RegisterCommand command) {
        PasswordAssessment assessment = passGuard.check(
            command.password(),
            false,
            new PasswordContext(
                command.username(), command.email(), command.displayName(),
                "your-product",
                Collections.singletonList("your-company")
            )
        );
        if (!assessment.accepted()) {
            throw new PasswordPolicyException(assessment.violations());
        }
        String encoded = passwordHasher.argon2id(command.password());
        return saveUser(command, encoded);
    }
}

默认 HIBP 客户端使用 Java 8 自带的同步 HttpURLConnection。应放在受控 I/O 线程池中，并配合兼容当前 Java 版本的缓存、超时、熔断和指标组件。指标只能记录状态与延迟，不能记录密码、完整哈希或响应内容。