Interface PasswordHistoryDecision

All Known Implementing Classes:
PasswordHistoryDecision.Allowed, PasswordHistoryDecision.Reused
public sealed interface PasswordHistoryDecision permits PasswordHistoryDecision.Allowed, PasswordHistoryDecision.Reused
Outcome of PasswordHistoryService.evaluate(String, SecretValue, PasswordHistoryPolicy).

Sealed so callers pattern-match exhaustively, replacing the primitive-boolean pattern (CWE-287). Adapters MUST surface the Reused variant as the same generic perimeter message they use for input-policy violations.

  • Nested Class Summary

    Nested Classes
    Modifier and Type
    Interface
    Description
    static final record 
    PasswordHistoryDecision.Allowed
    The candidate password did not match any retained historical entry — proceed.
    static final record 
    PasswordHistoryDecision.Reused
    The candidate password matched one of the retained historical verifiers and must be rejected.