[Defender Pro] Pwned Passwords integration with Peepso

defender-peepso-pwd-compat.php

<?php
/**
 * Plugin Name: [Defender Pro] Pwned Passwords integration with Peepso (Rev. 1)
 * Description: Solves a compatibility issue between Peepso Core plugin and the Defender's Pwned Passwords feature
 * Author: Anderson Salas @ WPMUDEV
 * Task: SLS-5836
 * Author URI: https://premium.wpmudev.org
 * License: GPLv2 or later
 */

add_action( 'plugins_loaded', function() {
    if ( ! defined( 'DEFENDER_VERSION' ) ) {
        return; // Defender is not installed/enabled.
    }
    add_action('peepso_ajax_start', function( $page ) {
        if ( 'auth.login' !== $page ) {
            return; // Not the Auth login page.
        }
        
        $controller = wd_di()->get( \WP_Defender\Controller\Password_Protection::class );
        $component  = wd_di()->get( \WP_Defender\Component\Password_Protection::class );

        remove_action( 'wp_authenticate_user', [ $controller, 'handle_login_password' ], 100 );
        add_action( 'wp_authenticate_user', function( $user, $password ) use ( $component )  {
            if (
                ! is_wp_error( $user ) &&
                wp_check_password( $password, $user->user_pass, $user->ID ) &&
                $component->is_weak_password( $user, $password )
            ) {
                $error = new WP_Error();
                $error->add(
                    'invalid_login',
                     __( 'You are required to change your password to a new one to use this site.', 'wpdef' ) 
                );
                return $error;
            }

            return $user;
        }, 100, 2 );
    });
});