Package com.svenruppert.jsentinel.credential.propagation

package com.svenruppert.jsentinel.credential.propagation

V00.74 declarative token-propagation SPIs.

This package owns the four building blocks every downstream V00.74 module composes:

• TokenCredential — sealed type for inbound / outbound tokens.
• TokenCredentialStore — per-subject store the runtime and compile-time wrappers read.
• OutboundTokenStrategy — pluggable "how does this token reach the downstream call" SPI.
• PassThroughStrategy — the core default.

Every public type in this package is annotated ExperimentalJSentinelApi. V00.74 ships the surface; stable-API promotion is staged for V00.76 after at least one real demo adoption.

Discipline: TokenCredential#value() is the raw token. It is never logged, never persisted, never audited. Every record subtype masks the value in toString(). The same discipline applies to the V00.71 PasswordHash surface — see Konzept-V00.71 §1.

Since:

00.74.00

Related Packages

Package	Description
com.svenruppert.jsentinel.credential

Class	Description
ApiKey	Opaque API key.
BearerToken	Opaque bearer token, typically carried as Authorization: Bearer <value>.
HeaderValue	Result of an OutboundTokenStrategy — a single HTTP header the consumer's HTTP client applies before sending.
InMemoryTokenCredentialStore	Single-slot in-memory store.
OidcAccessToken	OIDC access token.
OutboundCall	Input record for OutboundTokenStrategy.resolve(OutboundCall, java.util.Optional).
OutboundHeaderContext	Thread-local bridge between the V00.74 wrapper (runtime PropagatingProxy or compile-time <Type>Propagating) and the application's HTTP client.
OutboundTokenStrategy	Pluggable "how does the inbound token reach the downstream call" SPI.
PassThroughStrategy	Default OutboundTokenStrategy — forwards a bearer-style inbound token as Authorization: Bearer <value>.
PropagateTokenAdvisor	Pluggable advisor that turns a PropagateToken-annotated call + the current TokenCredential into an HeaderValue to bind on the outbound HTTP request.
PropagateTokenAdvisor.Default	Stateless default advisor: looks up the strategy by PropagateToken.strategy() via JSentinelServiceResolver.findOutboundTokenStrategy(String), calls its resolve with the store's current credential, and — when PropagateToken.header() is non-empty — overrides the strategy's chosen header name.
RefreshToken	Refresh token.
ThreadSafeTokenCredentialStore	Marker for TokenCredentialStore implementations that are safe to use from multiple threads.
TokenCredential	Sealed type for inbound / outbound tokens flowing through the V00.74 token-propagation pipeline.
TokenCredentialStore	Persistence-neutral store for the current subject's TokenCredential.