Add check for most common passwords

backend/src/controllers/v1/authController.ts

@@ -1,5 +1,7 @@
 import * as Sentry from '@sentry/node';
 import { Request, Response } from 'express';
+import fs from 'fs';
+import path from 'path';
 import jwt from 'jsonwebtoken';
 import * as bigintConversion from 'bigint-conversion';
 // eslint-disable-next-line @typescript-eslint/no-var-requires
@@ -224,6 +226,15 @@ export const logout = async (req: Request, res: Response) => {
   });
 };
 
+export const getCommonPasswords = async (req: Request, res: Response) => {
+  const commonPasswords = fs.readFileSync(
+		path.resolve(__dirname, '../../data/' + 'common_passwords.txt'),
+		'utf8'
+	).split('\n');	
+
+  return res.status(200).send(commonPasswords);
+}
+
 export const revokeAllSessions = async (req: Request, res: Response) => {
   await TokenVersion.updateMany({
     user: req.user._id

backend/src/routes/v1/auth.ts

@@ -59,8 +59,15 @@ router.get(
   authController.handleAuthProviderCallback,
 );
 
+router.get(
+  '/common-passwords',
+  authLimiter,
+  authController.getCommonPasswords
+);
+
 router.delete(
   '/sessions',
+  authLimiter,
   requireAuth({
     acceptedAuthModes: [AUTH_MODE_JWT]
   }),