prevent use of common password using the haveibeenpwned password api

app/utils/auth.server.ts

@@ -283,6 +283,7 @@ export async function checkCommonPassword(password: string) {
 		if (error instanceof Error && error.name === 'AbortError') {
 			console.warn('Password check timed out')
 		}
+		console.warn('unknow error during password check', error)
 		return false
 	}
 }

tests/mocks/common-password.ts

@@ -1,8 +1,7 @@
 import { http, HttpResponse } from 'msw'
 
-export const pwnedPasswordApiHandler = http.get(
-	'https://api.pwnedpasswords.com/range/:prefix',
-	() => {
+export const pwnedPasswordApiHandlers = [
+	http.get('https://api.pwnedpasswords.com/range/:prefix', () => {
 		return new HttpResponse('', { status: 200 })
-	},
-)
+	}),
+]

tests/mocks/index.ts

@@ -1,6 +1,6 @@
 import closeWithGrace from 'close-with-grace'
 import { setupServer } from 'msw/node'
-import { pwnedPasswordApiHandler } from './common-password.ts'
+import { pwnedPasswordApiHandlers } from './common-password.ts'
 import { handlers as githubHandlers } from './github.ts'
 import { handlers as resendHandlers } from './resend.ts'
 import { handlers as tigrisHandlers } from './tigris.ts'
@@ -9,7 +9,7 @@ export const server = setupServer(
 	...resendHandlers,
 	...githubHandlers,
 	...tigrisHandlers,
-	pwnedPasswordApiHandler,
+	...pwnedPasswordApiHandlers,
 )
 
 server.listen({