Class CredentialAuditPublisher

java.lang.Object

com.svenruppert.jsentinel.credential.password.audit.CredentialAuditPublisher

public final class CredentialAuditPublisher
extends Object

Translates CredentialVerificationResults into the new credential audit events and pushes them through JSentinelAuditService.

The publisher never propagates audit-sink exceptions to the caller (CWE-778 / CWE-693): publishing is defence-in-depth, not a hard precondition. Sink failures are swallowed so a misconfigured audit backend cannot turn into a denial-of-service against successful logins.

Constructor Summary

Constructors

Constructor	Description
CredentialAuditPublisher(JSentinelAuditService auditService)
CredentialAuditPublisher(JSentinelAuditService auditService, Clock clock)

Method Summary

Modifier and Type	Method	Description
void	publish(String username, String clientAddress, CredentialVerificationResult result, RehashDecision rehashDecision)	Publishes the appropriate audit event for the supplied verification outcome.
void	publishRehash(String username, String fromAlgorithm, String toAlgorithm, RehashReason reason, int targetPolicyVersion)	Publishes a CredentialRehashed event after a successful compare-and-swap upgrade in the credential store.

Methods inherited from class Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

CredentialAuditPublisher

public CredentialAuditPublisher(JSentinelAuditService auditService)

CredentialAuditPublisher

public CredentialAuditPublisher(JSentinelAuditService auditService,
 Clock clock)

Method Details

publish

public void publish(String username,
 String clientAddress,
 CredentialVerificationResult result,
 RehashDecision rehashDecision)

Publishes the appropriate audit event for the supplied verification outcome.

publishRehash

public void publishRehash(String username,
 String fromAlgorithm,
 String toAlgorithm,
 RehashReason reason,
 int targetPolicyVersion)

Publishes a CredentialRehashed event after a successful compare-and-swap upgrade in the credential store.