Provide sample code for SHA1 hashing for app developers to use
I have found a number of PowerShell wrappers to the API, and some text hashing scripts, but the hashing does not seem to work when used to hash a known bad password and send it via as SHA1 via the API. Example javascript and/or PowerShell scripts (and maybe others) to show how the hashing should be done, would allow all calls from apps, etc. to use the SHA1 value and not send the "clear" password (even over HTTPS) to the API.
Due to the breadth of different languages out there and the simplicity of create a SHA1 hash and sending it in a web request, I don’t want to get into language specific guidance. If you’re having trouble, try creating the hash here and comparing it with the one you’re creating: http://www.sha1-online.com/
I suspect it’s your encoding, you’ll get a speedy answer on Stack Overflow if you’re still having trouble.