Class RehashDecisionEngine

java.lang.Object

com.svenruppert.jsentinel.credential.password.rehash.RehashDecisionEngine

public final class RehashDecisionEngine
extends Object

Computes whether a successfully verified envelope must be transparently rehashed under the active policy.

Reasons are evaluated in a deterministic precedence so two verifications of the same envelope under the same policy always yield the same RehashReason.

Constructor Summary

Constructors

Constructor	Description
RehashDecisionEngine()

Method Summary

Modifier and Type	Method	Description
RehashDecision	decide(PasswordHashEnvelope envelope, PasswordHashPolicy policy)	Legacy two-argument overload that ignores pepper rotation.
RehashDecision	decide(PasswordHashEnvelope envelope, PasswordHashPolicy policy, Optional<String> activePepperKeyId)

Methods inherited from class Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

RehashDecisionEngine

public RehashDecisionEngine()

Method Details

decide

public RehashDecision decide(PasswordHashEnvelope envelope,
 PasswordHashPolicy policy)

Legacy two-argument overload that ignores pepper rotation. Equivalent to calling decide(PasswordHashEnvelope, PasswordHashPolicy, Optional) with Optional.empty().

decide

public RehashDecision decide(PasswordHashEnvelope envelope,
 PasswordHashPolicy policy,
 Optional<String> activePepperKeyId)

Parameters:

envelope - parsed envelope that the provider just verified

policy - active policy

activePepperKeyId - currently active pepper key id, or Optional.empty() when peppering is disabled. A mismatch with the envelope's pepper key id triggers RehashReason.PEPPER_KEY_ROTATED.