Adds "Add-Padding" header to not pwned verifier

laravel · Apr 21, 2021 · 8d4e5a0 · 8d4e5a0
1 parent aa74d01
commit 8d4e5a0
Show file tree

Hide file tree

Showing 2 changed files with 23 additions and 2 deletions.
diff --git a/src/Illuminate/Validation/NotPwnedVerifier.php b/src/Illuminate/Validation/NotPwnedVerifier.php
@@ -72,7 +72,9 @@ protected function getHash($value)
     protected function search($hashPrefix)
     {
         try {
-            $response = $this->factory->get(
+            $response = $this->factory->withHeaders([
+                'Add-Padding' => true,
+            ])->get(
                 'https://api.pwnedpasswords.com/range/'.$hashPrefix
             );
         } catch (Exception $e) {

diff --git a/tests/Validation/ValidationNotPwnedVerifierTest.php b/tests/Validation/ValidationNotPwnedVerifierTest.php
@@ -35,6 +35,13 @@ public function testApiResponseGoesWrong()
         $httpFactory = m::mock(HttpFactory::class);
         $response = m::mock(Response::class);
 
+        $httpFactory = m::mock(HttpFactory::class);
+
+        $httpFactory
+            ->shouldReceive('withHeaders')
+            ->with(['Add-Padding' => true])
+            ->andThrow($httpFactory);
+
         $httpFactory->shouldReceive('get')
             ->andReturn($response);
 
@@ -54,6 +61,11 @@ public function testApiGoesDown()
         $httpFactory = m::mock(HttpFactory::class);
         $response = m::mock(Response::class);
 
+        $httpFactory
+            ->shouldReceive('withHeaders')
+            ->with(['Add-Padding' => true])
+            ->andThrow($httpFactory);
+
         $httpFactory->shouldReceive('get')
             ->andReturn($response);
 
@@ -77,7 +89,14 @@ public function testDnsDown()
         });
 
         $httpFactory = m::mock(HttpFactory::class);
-        $httpFactory->shouldReceive('get')
+
+        $httpFactory
+            ->shouldReceive('withHeaders')
+            ->with(['Add-Padding' => true])
+            ->andThrow($httpFactory);
+
+        $httpFactory
+            ->shouldReceive('get')
             ->andThrow($exception);
 
         $verifier = new NotPwnedVerifier($httpFactory);