Interface CredentialMetricEvent

All Known Implementing Classes:

CredentialMetricEvent.AbuseSignal, CredentialMetricEvent.HashDuration, CredentialMetricEvent.KdfLimiterRejection, CredentialMetricEvent.LifecycleTransition, CredentialMetricEvent.RehashRequested, CredentialMetricEvent.VerifyDuration

public sealed interface CredentialMetricEvent
permits CredentialMetricEvent.HashDuration, CredentialMetricEvent.VerifyDuration, CredentialMetricEvent.RehashRequested, CredentialMetricEvent.LifecycleTransition, CredentialMetricEvent.AbuseSignal, CredentialMetricEvent.KdfLimiterRejection

Sealed family of data-minimised metric events emitted by security-core. The shape matches Konzept §16: durations, algorithm/policy distributions, counters — never the password material, salt, derived key, pepper key value, username or client address (CWE-532 / CWE-359).

Adapters export these to whichever metrics backend they like (Micrometer, OpenTelemetry, Prometheus, custom Statsd). The core stays backend-free.

Nested Class Summary

Nested Classes

Modifier and Type	Interface	Description
static final record	CredentialMetricEvent.AbuseSignal	Abuse pattern detector fired.
static final record	CredentialMetricEvent.HashDuration	One PasswordHashingService.hash call completed.
static final record	CredentialMetricEvent.KdfLimiterRejection	The KDF execution limiter shed an inbound verification.
static final record	CredentialMetricEvent.LifecycleTransition	A credential moved between lifecycle states.
static final record	CredentialMetricEvent.RehashRequested	A successful verification triggered a transparent rehash.
static final record	CredentialMetricEvent.VerifyDuration	One PasswordHashingService.verify call completed.