This plugin implements a password policy for Keycloak that checks user passwords against the Pwned Passwords API from have i been pwned?.
This plugin has only one message key: invalidPasswordBreached, which if you are on a Keycloak with version greater
than 24.0.0 can be changed on the realm's localization overrides. If on Keycloak < 24.0.0, change the message in
the src/main/resources/theme-resources/messages localization files, and recompile the plugin.