PackagePackageA library you install and call yourself.See every one →What this type is →independently maintainedindependently maintainedPublished by one person or a small company outside SAP. Says nothing about quality; the readings say that.See every one →
abap-pwnedpasswords
Checks from ABAP whether a password appears in the Have I Been Pwned breached-password list, wrapping the Pwned Passwords API V3 in one call that answers with a boolean.
Checking a password against a breach list means calling a service outside the ABAP system. This wraps the Pwned Passwords API V3 so an ABAP program can ask in one call: an instance from zcl_pwned_passwords=>create( ) answers is_password_pwned with a boolean, and get_password_status returns the fuller detail behind it. The SSL certificate for https://api.pwnedpasswords.com/ has to be in STRUST before the API can be called, for which the maintainer points at the abapGit SSL setup guide with that certificate in place of GitHub's.
Facts
Last pushLicenceMIT
Where it sits
Lives in
Provides
AuthenticationABAPAuthenticationEstablishing who is calling: validating credentials or tokens, resolving the user, and making that identity available to the application. [Authorization](capability:authorization) decides what that identity may do; [identity provisioning](capability:identity-provisioning) manages its lifecycle across systems.
Flavors
Who is behind it
Alistair TudorAlistair TudorMaintains this
In the atlas: maintains 1, contributes to 1@atudor2maintainerMarc BernardContributes to this
In the atlas: contributes to 26@mbtools1 contributor
In the atlas: maintains 1, contributes to 1@atudor2maintainerMarc BernardContributes to this
In the atlas: contributes to 26@mbtools1 contributor
What it declares
Every artifact
- Type
- Package
- Origin
- Independently maintained
As a package
- Where it runs
- does not say
- Distributed through
- does not say
Connections
Group by
NodeRelationBasis
Functional
AuthenticationAuthenticationEstablishing who is calling and making that identity availableSAP and community, narrow by design
provides
stated
provides Authentication
Wraps the Pwned Passwords API V3 so an ABAP program can check in one call whether a candidate password has appeared in a breach, returning a boolean or the fuller detail behind it.
“Pwned Passwords implementation for ABAP”
Establishing who is calling and making that identity available
Download
README
quoted from atudor2/abap-pwnedpasswords under MIT, readatudor2/abap-pwnedpasswords/README.mdthe maintainer’s wordsOn GitHub
abap-pwnedpasswords
Pwned Passwords implementation for ABAP
Built and tested with ABAP 7.52 SP01, but should work with any releases >= 7.50
Overview
Simple ABAP wrapper for the Pwned Passwords API V3 REST API provided by Troy Hunt.
Setup SSL
The SSL Certificates for https://api.pwnedpasswords.com/ must be added to STRUST before the API can be called.
The abapGit SSL Setup Guide provides the steps to do this.
Use the certificate from https://api.pwnedpasswords.com/ instead of GitHub
Usage
DATA(pwn_passwords) = zcl_pwned_passwords=>create( ).
" Check if password has been Pwned:
DATA(password) = ||.
cl_demo_input=>request(
EXPORTING text = 'Enter Password:'
CHANGING field = password ).
DATA(is_pwned) = pwn_passwords->is_password_pwned( i_password = password ).
cl_demo_output=>display(
EXPORTING
data = |{ COND #( WHEN is_pwned = abap_true THEN 'Password is PWNED' ELSE 'Password is safe...for now' ) }|
name = 'IS_PWNED' ).
" Check if password has been Pwned and get details:
DATA(pwned_password_details) = pwn_passwords->get_password_status( i_password = password ).
cl_demo_output=>display(
EXPORTING
data = pwned_password_details
name = 'PWNED_PASSWORD_DETAILS' ).Others providing
Compare all 9 on the Authentication page →AuthenticationAuthenticationEstablishing who is calling: validating credentials or tokens, resolving the user, and making that identity available to the application. Authorization decides what that identity may do; identity provisioning manages its lifecycle across systems.SAP and community, narrow by design
- abap_jwt_generatorabap_jwt_generatorGenerates a signed JSON Web Token in ABAP from an explicit header and claim, a stored profile in table ZJWT_PROFILE, or a shared secret, signing through a PSE profile or with the secret.independent, abapGenerates signed JSON Web Tokens in ABAP
- abapOAuthAzureabapOAuthAzureAn Enhancement Spot OA2C_SPECIFICS implementation for Microsoft Azure, written against ABAP's OAuth 2.0 Client API, with a one-sentence README that leaves configuration to SAP's help page.independent, abapOA2C_SPECIFICS implementation for Microsoft Azure OAuth 2.0 in ABAP
- abap2oauth2abap2oauth2An ABAP API for OAuth 2.0 authentication that registers a provider's client ID and secret as a named consumer and implements signature method 3, the one Google uses.independent, abapABAP API for OAuth 2.0 authentication
- abapNTLMabapNTLMAn HTTP NTLM client for ABAP, with the RC4, MD4 and DES algorithms the protocol needs implemented in ABAP, which its maintainer says seems to work only some of the time.independent, abapHTTP NTLM client for ABAP
- abap_cloud_platformabap_cloud_platformA TypeScript library of the Cloud Foundry calls that walk down to an ABAP service instance, read its SAP_ADT service key and log a user in, so a tool outside the system can reach it.independent, btpTypeScript library reaching ABAP service instances on Cloud Foundry
- decodesapsso2decodesapsso2A TypeScript library that decodes a MYSAPSSO2 logon ticket into its user, client, system and validity fields, and returns the signature without validating it, so it never shows a ticket is genuine.independent, abapTypeScript decoder for MYSAPSSO2 logon tickets
- Cloud ConnectorCloud ConnectorSAP's on-premises agent that links SAP BTP applications to systems in a customer's own network, as a reverse invoke proxy that exposes only the systems and resources it is configured to allow.sap official, btpSAP's on-premises agent linking SAP BTP to customer-network systems
- abap-aws-sigv4abap-aws-sigv4Signs outbound HTTP calls to AWS APIs with AWS Signature Version 4, directly from ABAP.independent, abapSigns outbound HTTP calls to AWS APIs with AWS Signature Version 4, directly from ABAP.
Details
Sources
Sources are graph entities: the same page may back several entries, and an unreachable source flags every row that rests on it.
Compatibility and provenance
discovered viadotabap
first seen in the atlas
ecosystem and domainabap, security-and-compliance
abaplint
issues under its own abaplint configuration119
lines1,022
statements290
objects9
files13
analysed, master
abaplint version2.120.84
read fromabaplint.app,
Flavors
Standard ABAP
“Built and tested with ABAP 7.52 SP01, but should work with any releases >= 7.50” — atudor2/abap-pwnedpasswords — README
Contributors
History in the atlas
- First seen.
For your agent
- Ref
artifact:atudor2-abap-pwnedpasswords- JSON
- /artifacts/atudor2-abap-pwnedpasswords.json
- MCP
- Connecting an agent