Class NoOpPepperService
java.lang.Object
com.svenruppert.jsentinel.credential.password.pepper.NoOpPepperService
- All Implemented Interfaces:
PepperService
Phase-1a placeholder for
PepperService.
This implementation deliberately performs no pepper protection. It
publishes no active key id, and a lookup of any non-empty
keyId resolves to Optional.empty(). The verification
pipeline interprets that as
VERIFICATION_FAILED_UNKNOWN_PEPPER_KEY so an envelope that
was peppered cannot be silently downgraded.
The class name is the explicit warning: production deployments must replace this implementation when Phase 2 ships a real pepper service.
-
Field Summary
Fields -
Constructor Summary
Constructors -
Method Summary
-
Field Details
-
INSTANCE
-
-
Constructor Details
-
NoOpPepperService
public NoOpPepperService()
-
-
Method Details
-
activeKeyId
Description copied from interface:PepperServiceCurrently active pepper key id used by the policy when producing new hashes.Optional.empty()signals that no pepper is applied to new hashes.- Specified by:
activeKeyIdin interfacePepperService
-
resolve
Description copied from interface:PepperServiceResolves the pepper material for a previously stored hash.- Specified by:
resolvein interfacePepperService- Returns:
- the pepper bytes, or
Optional.empty()when no pepper service knows about this key id
-