Class PasswordInputValidator

java.lang.Object

com.svenruppert.jsentinel.credential.input.PasswordInputValidator

public final class PasswordInputValidator
extends Object

Checks password input against the PasswordInputPolicy.

Validation runs before any KDF call so cheap structural problems never trigger expensive hashing (CWE-20 / CWE-400).

The validator works in two modes:

• validate(SecretValue, PasswordInputPolicy) for the SecretValue path (recommended);
• validate(char[], PasswordInputPolicy) for the legacy char[] path — the array is not zeroed; the caller retains ownership.

Constructor Summary

Constructors

Constructor	Description
PasswordInputValidator()

Method Summary

Modifier and Type	Method	Description
PasswordInputValidationResult	validate(char[] chars, PasswordInputPolicy policy)
PasswordInputValidationResult	validate(SecretValue secret, PasswordInputPolicy policy)

Methods inherited from class Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

PasswordInputValidator

public PasswordInputValidator()

Method Details

validate

public PasswordInputValidationResult validate(SecretValue secret,
 PasswordInputPolicy policy)

validate

public PasswordInputValidationResult validate(char[] chars,
 PasswordInputPolicy policy)