Index (Sentinel for Java 00.74.00 API)

A B C D E F G H I J K L M N O P Q R S T U V W
All Classes and Interfaces|All Packages|Constant Field Values|Serialized Form

A

absoluteLifetime() - Method in record class com.svenruppert.jsentinel.session.TimeoutSessionPolicy.Config: Returns the value of the absoluteLifetime record component.
absoluteLifetimeExceeded() - Static method in interface com.svenruppert.jsentinel.session.SessionPolicyDecision: Convenience factory for the SessionPolicyDecision.AbsoluteLifetimeExceeded singleton.
AbsoluteLifetimeExceeded() - Constructor for record class com.svenruppert.jsentinel.session.SessionPolicyDecision.AbsoluteLifetimeExceeded: Creates an instance of a AbsoluteLifetimeExceeded record class.
AbuseAttemptContext - Record Class in com.svenruppert.jsentinel.credential.abuse: Adapter-neutral attempt context passed into AbuseDetectionService.evaluate(AbuseAttemptContext) and AbuseDetectionService.recordOutcome(AbuseAttemptContext, AttemptOutcome).
AbuseAttemptContext(AbuseAttemptType, Optional, Optional, TenantId, Instant) - Constructor for record class com.svenruppert.jsentinel.credential.abuse.AbuseAttemptContext: Creates an instance of a AbuseAttemptContext record class.
AbuseAttemptType - Enum Class in com.svenruppert.jsentinel.credential.abuse: Categories of credential-sensitive operations the AbuseDetectionService tracks independently.
AbuseDecision - Interface in com.svenruppert.jsentinel.credential.abuse: Progressive reaction returned by AbuseDetectionService.evaluate(AbuseAttemptContext).
AbuseDecision.Allow - Record Class in com.svenruppert.jsentinel.credential.abuse: The attempt may proceed unconditionally.
AbuseDecision.Block - Record Class in com.svenruppert.jsentinel.credential.abuse: Refuse the attempt.
AbuseDecision.Delay - Record Class in com.svenruppert.jsentinel.credential.abuse: Honour the attempt but pause for delay first — a soft brake that slows automated scanners without locking the user out.
AbuseDecision.RequireAdditionalCheck - Record Class in com.svenruppert.jsentinel.credential.abuse: Require step-up authentication / captcha / additional check before the attempt may proceed.
AbuseDetectionService - Interface in com.svenruppert.jsentinel.credential.abuse: Multi-dimensional abuse detection contract.
AbuseDimension - Enum Class in com.svenruppert.jsentinel.credential.abuse: Counter dimension used by AbuseDetectionService.
AbuseLimitsPolicy - Class in com.svenruppert.jsentinel.credential.abuse: Per-dimension and per-attempt-type limits consumed by InMemoryAbuseDetectionService.
AbuseLimitsPolicy.Builder - Class in com.svenruppert.jsentinel.credential.abuse
AbuseLimitsPolicy.Limit - Record Class in com.svenruppert.jsentinel.credential.abuse: Single sliding-window limit definition.
AbusePattern - Enum Class in com.svenruppert.jsentinel.credential.abuse: Named patterns detectable by the AbusePatternMonitor.
AbusePatternMonitor - Class in com.svenruppert.jsentinel.credential.abuse: Higher-level abuse-pattern detector that sits next to the AbuseDetectionService.
AbusePatternMonitor(AbusePatternMonitor.Config, Consumer) - Constructor for class com.svenruppert.jsentinel.credential.abuse.AbusePatternMonitor
AbusePatternMonitor.Config - Record Class in com.svenruppert.jsentinel.credential.abuse: Tunables for the three pattern detectors.
AbusePatternSignal - Record Class in com.svenruppert.jsentinel.credential.abuse: Privacy-minimised signal emitted by an AbusePatternMonitor detector when a pattern crosses its threshold.
AbusePatternSignal(AbusePattern, Instant, Duration, int, int) - Constructor for record class com.svenruppert.jsentinel.credential.abuse.AbusePatternSignal: Creates an instance of a AbusePatternSignal record class.
AbuseSignal(AbusePattern, int, int) - Constructor for record class com.svenruppert.jsentinel.credential.metrics.CredentialMetricEvent.AbuseSignal: Creates an instance of a AbuseSignal record class.
accept(AuditEvent) - Method in interface com.svenruppert.jsentinel.audit.AuditSink: Records the given event.
accept(AuditEvent) - Method in class com.svenruppert.jsentinel.audit.LoggingAuditSink
accept(AuditEvent) - Method in class com.svenruppert.jsentinel.audit.RingBufferAuditSink
acceptableAlgorithms() - Method in class com.svenruppert.jsentinel.credential.password.policy.DefaultPasswordHashPolicy
acceptableAlgorithms() - Method in interface com.svenruppert.jsentinel.credential.password.policy.PasswordHashPolicy: Algorithm identifiers that are still accepted by this policy.
acceptableProviderIds() - Method in class com.svenruppert.jsentinel.credential.password.policy.DefaultPasswordHashPolicy
acceptableProviderIds() - Method in interface com.svenruppert.jsentinel.credential.password.policy.PasswordHashPolicy: Provider identifiers that are still accepted by this policy.
Accepted() - Constructor for record class com.svenruppert.jsentinel.credential.input.PasswordInputValidationResult.Accepted: Creates an instance of a Accepted record class.
accessContext() - Method in record class com.svenruppert.jsentinel.policy.api.PolicyContext: Returns the value of the accessContext record component.
accessContext() - Method in record class com.svenruppert.jsentinel.policy.api.ResourceAccessContext: Returns the value of the accessContext record component.
AccessContext - Record Class in com.svenruppert.jsentinel.authorization.navigation: Vaadin-free context for access evaluation.
AccessContext(String, Class, Map) - Constructor for record class com.svenruppert.jsentinel.authorization.navigation.AccessContext: Compatibility constructor for existing Vaadin navigation code.
AccessContext(Optional, String, String, String, Map) - Constructor for record class com.svenruppert.jsentinel.authorization.navigation.AccessContext: Creates an access context with defensive copies.
AccessDecision - Interface in com.svenruppert.jsentinel.authorization.navigation: Vaadin-free result of an authorization-phase evaluation.
AccessDecision.Granted - Record Class in com.svenruppert.jsentinel.authorization.navigation: Access is granted.
AccessDecision.Reroute - Record Class in com.svenruppert.jsentinel.authorization.navigation: Access is denied and should redirect to a target route.
AccessDecision.RerouteToError - Record Class in com.svenruppert.jsentinel.authorization.navigation: Access is denied and should reroute to an error page.
AccessDecision.RerouteWithParameter<T> - Record Class in com.svenruppert.jsentinel.authorization.navigation: Access is denied and should reroute with one route parameter.
AccessDecision.RerouteWithParameters<T> - Record Class in com.svenruppert.jsentinel.authorization.navigation: Access is denied and should reroute with multiple route parameters.
accessDenied(String, boolean) - Static method in interface com.svenruppert.jsentinel.authorization.navigation.NavigationAccessDecision: Creates an NavigationAccessDecision.AccessDenied decision with a redirect target.
AccessDenied - Record Class in com.svenruppert.jsentinel.audit: Access to a protected route or endpoint was refused.
AccessDenied(String, boolean) - Constructor for record class com.svenruppert.jsentinel.authorization.navigation.NavigationAccessDecision.AccessDenied: Creates an instance of a AccessDenied record class.
AccessDenied(Instant, String, String, String) - Constructor for record class com.svenruppert.jsentinel.audit.AccessDenied: Creates an instance of a AccessDenied record class.
AccessDeniedException - Exception Class in com.svenruppert.jsentinel.authorization.api: Thrown when an in-process security guard refuses an action because the current subject lacks the required role or permission.
AccessDeniedException(String) - Constructor for exception class com.svenruppert.jsentinel.authorization.api.AccessDeniedException
AccessDeniedException(String, Throwable) - Constructor for exception class com.svenruppert.jsentinel.authorization.api.AccessDeniedException
AccessEvaluator<T> - Interface in com.svenruppert.jsentinel.authorization.api: Evaluates whether the current subject has access to a route target.
accessEvaluatorClass() - Method in record class com.svenruppert.jsentinel.authorization.impl.AnnotationAccessEvaluatorPair: Compatibility accessor for Vaadin-oriented AccessEvaluators.
accessExpiresAt() - Method in record class com.svenruppert.jsentinel.authentication.TokenService.TokenPair: Returns the value of the accessExpiresAt record component.
AccessGranted - Record Class in com.svenruppert.jsentinel.audit: A subject was granted access to a protected route or endpoint.
AccessGranted(Instant, String, String) - Constructor for record class com.svenruppert.jsentinel.audit.AccessGranted: Creates an instance of a AccessGranted record class.
accessToken() - Method in record class com.svenruppert.jsentinel.authentication.TokenService.TokenPair: Returns the value of the accessToken record component.
acquire() - Method in interface com.svenruppert.jsentinel.credential.password.limiter.KdfExecutionLimiter: Tries to acquire a KDF permit.
acquire() - Method in class com.svenruppert.jsentinel.credential.password.limiter.NoLimitKdfExecutionLimiter
acquire() - Method in class com.svenruppert.jsentinel.credential.password.limiter.SemaphoreKdfExecutionLimiter
action() - Method in record class com.svenruppert.jsentinel.audit.ActionDenied: Returns the value of the action record component.
actionAuthorizationService() - Static method in class com.svenruppert.jsentinel.authorization.api.JSentinelServiceResolver: Returns the registered ActionAuthorizationService.
ActionAuthorizationService - Interface in com.svenruppert.jsentinel.action: SPI for fine-grained action checks.
ActionDenied - Record Class in com.svenruppert.jsentinel.audit: A guarded action call was denied — the subject did not satisfy the required ActionPermission.
ActionDenied(Instant, String, String) - Constructor for record class com.svenruppert.jsentinel.audit.ActionDenied: Creates an instance of a ActionDenied record class.
ActionPermission - Record Class in com.svenruppert.jsentinel.action: Stable, typed identifier for a fine-grained business action.
ActionPermission(String) - Constructor for record class com.svenruppert.jsentinel.action.ActionPermission: Defensive constructor — rejects null and blank names.
active() - Static method in interface com.svenruppert.jsentinel.session.SessionPolicyDecision: Convenience factory for the SessionPolicyDecision.Active singleton.
Active() - Constructor for record class com.svenruppert.jsentinel.session.SessionPolicyDecision.Active: Creates an instance of a Active record class.
ACTIVE - Enum constant in enum class com.svenruppert.jsentinel.credential.store.CredentialStatus
ACTIVE - Enum constant in enum class com.svenruppert.jsentinel.session.SessionStatus: Session is open and admissible.
activeKeyId() - Method in class com.svenruppert.jsentinel.credential.password.pepper.InMemoryPepperService
activeKeyId() - Method in class com.svenruppert.jsentinel.credential.password.pepper.NoOpPepperService
activeKeyId() - Method in interface com.svenruppert.jsentinel.credential.password.pepper.PepperService: Currently active pepper key id used by the policy when producing new hashes.
activeKeyId(String) - Method in class com.svenruppert.jsentinel.credential.password.pepper.InMemoryPepperService.Builder
activeReferenceFor(TenantCredentialContext) - Method in class com.svenruppert.jsentinel.credential.tenant.DefaultTenantAwarePepperReferenceResolver
activeReferenceFor(TenantCredentialContext) - Method in interface com.svenruppert.jsentinel.credential.tenant.TenantAwarePepperReferenceResolver
activeSubject() - Method in class com.svenruppert.jsentinel.authorization.api.permissions.PermissionBasedAccessEvaluator: Returns the currently active subject whose permissions are checked.
adapterResourceType() - Method in record class com.svenruppert.jsentinel.policy.api.ResourceAccessContext: Shortcut to the adapter-level resource type ("vaadin-view", "rest-endpoint", "method").
addAcceptableAlgorithm(String) - Method in class com.svenruppert.jsentinel.credential.password.policy.DefaultPasswordHashPolicy.Builder
addAcceptableProviderId(String) - Method in class com.svenruppert.jsentinel.credential.password.policy.DefaultPasswordHashPolicy.Builder
addKey(String, byte[]) - Method in class com.svenruppert.jsentinel.credential.password.pepper.InMemoryPepperService.Builder
addListener(LogoutListener) - Method in interface com.svenruppert.jsentinel.logout.LogoutService: Registers a listener that gets notified once per logged-out session id.
addListener(LogoutListener) - Method in class com.svenruppert.jsentinel.logout.NoopLogoutService
addListener(LogoutListener) - Method in class com.svenruppert.jsentinel.logout.SubjectClearingLogoutService
adminCreated() - Method in record class com.svenruppert.jsentinel.bootstrap.BootstrapState: Returns the value of the adminCreated record component.
adminCreatedAt() - Method in record class com.svenruppert.jsentinel.bootstrap.BootstrapState: Returns the value of the adminCreatedAt record component.
AdministratorAccountStore - Interface in com.svenruppert.jsentinel.bootstrap: Application-side seam used by InitialAdminBootstrapService to answer "is anyone an administrator?"
adviseFor(PropagateToken, OutboundCall, TokenCredentialStore) - Method in interface com.svenruppert.jsentinel.credential.propagation.PropagateTokenAdvisor
adviseFor(PropagateToken, OutboundCall, TokenCredentialStore) - Method in class com.svenruppert.jsentinel.credential.propagation.PropagateTokenAdvisor.Default
algorithm() - Method in record class com.svenruppert.jsentinel.audit.CredentialVerificationSucceeded: Returns the value of the algorithm record component.
algorithm() - Method in record class com.svenruppert.jsentinel.authentication.PasswordHash: Returns the value of the algorithm record component.
algorithm() - Method in record class com.svenruppert.jsentinel.credential.metrics.CredentialMetricEvent.HashDuration: Returns the value of the algorithm record component.
algorithm() - Method in record class com.svenruppert.jsentinel.credential.metrics.CredentialMetricEvent.VerifyDuration: Returns the value of the algorithm record component.
algorithm() - Method in record class com.svenruppert.jsentinel.credential.password.calibration.CalibrationProfile: Returns the value of the algorithm record component.
algorithm() - Method in record class com.svenruppert.jsentinel.credential.password.CredentialVerificationResult.Verified: Returns the value of the algorithm record component.
algorithm() - Method in record class com.svenruppert.jsentinel.credential.password.envelope.PasswordHashEnvelope: Returns the value of the algorithm record component.
algorithm() - Method in record class com.svenruppert.jsentinel.credential.password.PasswordHashResult: Returns the value of the algorithm record component.
algorithm() - Method in class com.svenruppert.jsentinel.credential.password.pbkdf2.Pbkdf2ParameterValidator
algorithm() - Method in class com.svenruppert.jsentinel.credential.password.pbkdf2.Pbkdf2PasswordHashProvider
algorithm() - Method in interface com.svenruppert.jsentinel.credential.password.policy.PasswordHashParameterValidator: Algorithm identifier this validator handles, matched verbatim against the alg field of the envelope.
algorithm() - Method in interface com.svenruppert.jsentinel.credential.password.provider.PasswordHashProvider: Canonical algorithm identifier this provider handles by default.
ALGORITHM - Static variable in class com.svenruppert.jsentinel.credential.password.pbkdf2.Pbkdf2ParameterNames: Canonical algorithm identifier.
ALGORITHM_COMPROMISE - Enum constant in enum class com.svenruppert.jsentinel.credential.emergency.EmergencyPolicyOverride.Reason: A hashing algorithm has lost its acceptable status.
ALGORITHM_DEPRECATED - Enum constant in enum class com.svenruppert.jsentinel.credential.password.RehashReason
ALGORITHM_ID - Static variable in class com.svenruppert.jsentinel.authentication.Pbkdf2PasswordHasher: Algorithm identifier exposed by PasswordHash.algorithm().
all() - Static method in record class com.svenruppert.jsentinel.audit.AuditQuery: A query that returns every retained event.
all() - Method in class com.svenruppert.jsentinel.authorization.api.operations.SecuredOperationRegistry
allOf(String, Policy...) - Static method in class com.svenruppert.jsentinel.policy.api.JSentinelPolicies: Combinator: all sub-policies must pass.
Allow() - Constructor for record class com.svenruppert.jsentinel.credential.abuse.AbuseDecision.Allow: Creates an instance of a Allow record class.
ALLOW - Enum constant in enum class com.svenruppert.jsentinel.credential.compromised.CheckFailurePolicy: Treat a failed check as Clean — the change proceeds.
allowed() - Static method in interface com.svenruppert.jsentinel.authorization.navigation.NavigationAccessDecision: Creates an NavigationAccessDecision.Allowed decision.
allowed() - Static method in interface com.svenruppert.jsentinel.bruteforce.LoginAttemptDecision: Convenience for the singleton LoginAttemptDecision.Allowed.
allowed(String) - Static method in interface com.svenruppert.jsentinel.policy.api.PolicyDecision: Creates an PolicyDecision.Allowed decision.
Allowed() - Constructor for record class com.svenruppert.jsentinel.authorization.navigation.NavigationAccessDecision.Allowed: Creates an instance of a Allowed record class.
Allowed() - Constructor for record class com.svenruppert.jsentinel.bruteforce.LoginAttemptDecision.Allowed: Creates an instance of a Allowed record class.
Allowed() - Constructor for record class com.svenruppert.jsentinel.credential.history.PasswordHistoryDecision.Allowed: Creates an instance of a Allowed record class.
Allowed(int, int, Duration) - Constructor for record class com.svenruppert.jsentinel.ratelimiting.RateLimitDecision.Allowed: Validates the components.
Allowed(String) - Constructor for record class com.svenruppert.jsentinel.policy.api.PolicyDecision.Allowed: Creates an instance of a Allowed record class.
allowIf(Predicate) - Method in class com.svenruppert.jsentinel.policy.api.PolicyBuilder: Adds an allow-predicate.
allowsArgon2() - Method in record class com.svenruppert.jsentinel.credential.standards.FipsProfile: Returns the value of the allowsArgon2 record component.
allowsBcrypt() - Method in record class com.svenruppert.jsentinel.credential.standards.FipsProfile: Returns the value of the allowsBcrypt record component.
allowsHibpSha1Prefix() - Method in record class com.svenruppert.jsentinel.credential.standards.FipsProfile: Returns the value of the allowsHibpSha1Prefix record component.
allowsScrypt() - Method in record class com.svenruppert.jsentinel.credential.standards.FipsProfile: Returns the value of the allowsScrypt record component.
allPermissions() - Method in interface com.svenruppert.jsentinel.authorization.api.permissions.PermissionCatalog: Returns all known permission names.
AllSessionsOfSubject - Enum constant in enum class com.svenruppert.jsentinel.logout.LogoutScope: Log the subject out of every active session for that subject.
alreadyAtTarget() - Method in record class com.svenruppert.jsentinel.credential.emergency.MassCredentialStatusChange.Report: Returns the value of the alreadyAtTarget record component.
AlreadyInitialized() - Constructor for record class com.svenruppert.jsentinel.bootstrap.InitialAdminCreationResult.AlreadyInitialized: Creates an instance of a AlreadyInitialized record class.
alreadyLoggedIn() - Static method in interface com.svenruppert.jsentinel.authorization.navigation.NavigationAccessDecision: Creates an NavigationAccessDecision.AlreadyLoggedIn decision.
AlreadyLoggedIn() - Constructor for record class com.svenruppert.jsentinel.authorization.navigation.NavigationAccessDecision.AlreadyLoggedIn: Creates an instance of a AlreadyLoggedIn record class.
alternativeNavigationTarget(AccessContext, T) - Method in class com.svenruppert.jsentinel.authorization.api.permissions.PermissionBasedAccessEvaluator: Determines the alternative navigation target when the subject lacks the required permissions.
alternativeNavigationTarget(AccessContext, T) - Method in interface com.svenruppert.jsentinel.authorization.api.roles.RoleBasedAccessEvaluatorAPI: Determines the alternative navigation target when the subject lacks the required roles.
alternativeRoute() - Method in record class com.svenruppert.jsentinel.authorization.navigation.NavigationAccessDecision.AccessDenied: Returns the value of the alternativeRoute record component.
annotation() - Method in record class com.svenruppert.jsentinel.authorization.impl.AnnotationAccessEvaluatorPair: Returns the value of the annotation record component.
AnnotationAccessEvaluatorPair<T> - Record Class in com.svenruppert.jsentinel.authorization.impl: Pairs a restriction annotation instance with the evaluator class declared via JSentinelAnnotation.
AnnotationAccessEvaluatorPair(T, Class) - Constructor for record class com.svenruppert.jsentinel.authorization.impl.AnnotationAccessEvaluatorPair: Creates an instance of a AnnotationAccessEvaluatorPair record class.
anyOf(String, Policy...) - Static method in class com.svenruppert.jsentinel.policy.api.JSentinelPolicies: Combinator: any sub-policy passing is enough.
anyRoleOrPermission(String, Set, Set) - Static method in class com.svenruppert.jsentinel.policy.api.JSentinelPolicies: Any-of: subject passes if it holds any of the given roles or any of the given permissions.
ApiKey - Record Class in com.svenruppert.jsentinel.credential.propagation: Opaque API key.
ApiKey(String, Optional, Optional, Optional) - Constructor for record class com.svenruppert.jsentinel.credential.propagation.ApiKey: Creates an instance of a ApiKey record class.
ApiKeyAuthenticationService - Class in com.svenruppert.jsentinel.authentication: Authentication facade for long-lived API keys, sitting on top of an ApiKeyStore + PasswordHasher.
ApiKeyAuthenticationService(ApiKeyStore, PasswordHasher, JSentinelAuditService) - Constructor for class com.svenruppert.jsentinel.authentication.ApiKeyAuthenticationService: Convenience constructor: tenant TenantId.DEFAULT, system clock.
ApiKeyAuthenticationService(ApiKeyStore, PasswordHasher, JSentinelAuditService, TenantId, Clock) - Constructor for class com.svenruppert.jsentinel.authentication.ApiKeyAuthenticationService: Full constructor.
ApiKeyDenied - Record Class in com.svenruppert.jsentinel.audit: Emitted when an API-key authentication was refused — unknown key, expired, revoked, or in a foreign tenant.
ApiKeyDenied(Instant, String, String, String) - Constructor for record class com.svenruppert.jsentinel.audit.ApiKeyDenied: Validates the record components.
ApiKeyRecord - Record Class in com.svenruppert.jsentinel.authentication: Persistent representation of a single long-lived API key.
ApiKeyRecord(String, TenantId, SubjectId, String, Set, Instant, Optional, Optional, Optional) - Constructor for record class com.svenruppert.jsentinel.authentication.ApiKeyRecord: Validates the record components, normalises null tenant to TenantId.DEFAULT, defensively copies scopes, and replaces null Optionals with Optional.empty().
ApiKeyStore - Interface in com.svenruppert.jsentinel.authentication: Persistent store for ApiKeyRecords — backs the planned API-key authentication flow (V00.70 Phase 7b).
ApiKeyUsed - Record Class in com.svenruppert.jsentinel.audit: Emitted when an API-key was successfully used to authenticate a request — i.e.
ApiKeyUsed(Instant, String, String, String) - Constructor for record class com.svenruppert.jsentinel.audit.ApiKeyUsed: Validates the record components.
append(TenantId, AuditEvent) - Method in interface com.svenruppert.jsentinel.audit.AuditEventStore: Persists an audit event under the given tenant scope and returns the resulting envelope (including the store-assigned identifier).
append(TenantId, AuditEvent) - Method in class com.svenruppert.jsentinel.audit.InMemoryAuditEventStore
appendAndTrim(String, PasswordHistoryEntry, int) - Method in class com.svenruppert.jsentinel.credential.history.InMemoryPasswordHistoryStore
appendAndTrim(String, PasswordHistoryEntry, int) - Method in interface com.svenruppert.jsentinel.credential.history.PasswordHistoryStore: Appends entry and trims the per-user history to the supplied retention size — the two operations run as a single unit so concurrent inserts cannot bypass the cap.
apply(byte[], Optional) - Static method in class com.svenruppert.jsentinel.credential.password.pepper.PepperApplicator: Returns HMAC-SHA-256(pepper.key, kdfOutput) when pepper is present, otherwise a copy of the KDF output.
asChars() - Method in class com.svenruppert.jsentinel.credential.secret.SecretValue: Returns a defensive copy of the held characters.
asForward() - Method in record class com.svenruppert.jsentinel.authorization.navigation.AccessDecision.Reroute: Returns the value of the asForward record component.
asForward() - Method in record class com.svenruppert.jsentinel.authorization.navigation.NavigationAccessDecision.AccessDenied: Returns the value of the asForward record component.
assignedBy() - Method in record class com.svenruppert.jsentinel.audit.RoleAssigned: Returns the value of the assignedBy record component.
assignRole(RoleAssignmentKey, RoleName) - Method in class com.svenruppert.jsentinel.authorization.api.roles.InMemoryRoleAssignmentStore
assignRole(RoleAssignmentKey, RoleName) - Method in interface com.svenruppert.jsentinel.authorization.api.roles.RoleAssignmentStore: Adds a single role to key's set, if not already present.
asUtf8Bytes() - Method in class com.svenruppert.jsentinel.credential.secret.SecretValue: Returns the UTF-8 encoding of the held characters in a fresh byte array.
at() - Method in record class com.svenruppert.jsentinel.credential.abuse.AbuseAttemptContext: Returns the value of the at record component.
at() - Method in record class com.svenruppert.jsentinel.credential.abuse.AbusePatternSignal: Returns the value of the at record component.
at() - Method in record class com.svenruppert.jsentinel.session.JSentinelVersionStatus.Current: Returns the value of the at record component.
AttemptOutcome - Enum Class in com.svenruppert.jsentinel.credential.abuse: Outcome of an attempt, fed back to AbuseDetectionService.recordOutcome(AbuseAttemptContext, AttemptOutcome) so the counters can react.
attempts() - Method in record class com.svenruppert.jsentinel.credential.abuse.AbusePatternSignal: Returns the value of the attempts record component.
attempts() - Method in record class com.svenruppert.jsentinel.credential.metrics.CredentialMetricEvent.AbuseSignal: Returns the value of the attempts record component.
attemptType() - Method in record class com.svenruppert.jsentinel.credential.abuse.AbuseAttemptContext: Returns the value of the attemptType record component.
ATTRIBUTE_KEY - Static variable in record class com.svenruppert.jsentinel.policy.api.ResourceRef: Key under which adapters / callers stash a ResourceRef in AccessContext.attributes() so the RequiresPolicyEvaluator can promote it into the PolicyContext.
attributeEquals(String, Object) - Static method in class com.svenruppert.jsentinel.policy.api.ContextPredicates: Matches when the wrapped access context's attributes map contains key with the given value.
attributes() - Method in record class com.svenruppert.jsentinel.accountlifecycle.JSentinelNotification: Returns the value of the attributes record component.
attributes() - Method in record class com.svenruppert.jsentinel.authorization.api.operations.SecuredOperationDescriptor: Returns the value of the attributes record component.
attributes() - Method in record class com.svenruppert.jsentinel.authorization.navigation.AccessContext: Returns the value of the attributes record component.
attributes() - Method in record class com.svenruppert.jsentinel.session.SessionContext: Returns the value of the attributes record component.
attributes(T) - Method in interface com.svenruppert.jsentinel.policy.spi.ResourceResolver: Extracts the predicate-relevant attributes of a resolved resource (e.g.
audience() - Element in annotation interface com.svenruppert.jsentinel.annotations.PropagateToken: Declared audience for the downstream call.
audience() - Method in record class com.svenruppert.jsentinel.credential.propagation.ApiKey: Returns the value of the audience record component.
audience() - Method in record class com.svenruppert.jsentinel.credential.propagation.BearerToken: Returns the value of the audience record component.
audience() - Method in record class com.svenruppert.jsentinel.credential.propagation.OidcAccessToken: Returns the value of the audience record component.
audience() - Method in record class com.svenruppert.jsentinel.credential.propagation.RefreshToken: Returns the value of the audience record component.
audience() - Method in interface com.svenruppert.jsentinel.credential.propagation.TokenCredential
Audit - Section in class com.svenruppert.jsentinel.bruteforce.InMemoryLoginAttemptPolicy
AuditEnvelope - Record Class in com.svenruppert.jsentinel.audit: Persisted form of an AuditEvent.
AuditEnvelope(String, TenantId, AuditEvent) - Constructor for record class com.svenruppert.jsentinel.audit.AuditEnvelope: Validates the record components and substitutes TenantId.DEFAULT for a null tenant.
AuditEvent - Interface in com.svenruppert.jsentinel.audit: Sealed root of the typed security audit event hierarchy.
AuditEventStore - Interface in com.svenruppert.jsentinel.audit: Persistent counterpart to AuditSink.
AuditQuery - Record Class in com.svenruppert.jsentinel.audit: Filter passed to JSentinelAuditService.query(...).
AuditQuery(Set, String, Instant, Instant, int) - Constructor for record class com.svenruppert.jsentinel.audit.AuditQuery: Creates an instance of a AuditQuery record class.
AuditSink - Interface in com.svenruppert.jsentinel.audit: Write-only destination for AuditEvents.
authenticate(String) - Method in class com.svenruppert.jsentinel.authentication.ApiKeyAuthenticationService: Authenticates the supplied plain key.
authenticationService() - Static method in class com.svenruppert.jsentinel.authorization.api.JSentinelServiceResolver: Returns the registered AuthenticationService.
AuthenticationService<T,U> - Interface in com.svenruppert.jsentinel.authentication: SPI contract for credential validation and subject loading.
authorisedBy() - Method in record class com.svenruppert.jsentinel.credential.emergency.EmergencyPolicyOverride: Returns the value of the authorisedBy record component.
AuthorizationDecision - Interface in com.svenruppert.jsentinel.authorization.api: Semantic adapter-neutral authorization decision.
AuthorizationDecision.Forbidden - Record Class in com.svenruppert.jsentinel.authorization.api: A subject is available but lacks the required authority.
AuthorizationDecision.Granted - Record Class in com.svenruppert.jsentinel.authorization.api: Access is granted.
AuthorizationDecision.StepUpRequired - Record Class in com.svenruppert.jsentinel.authorization.api: A subject is authenticated but a step-up challenge is required before access can be granted.
AuthorizationDecision.Unauthenticated - Record Class in com.svenruppert.jsentinel.authorization.api: No authenticated subject is available.
AuthorizationEvaluator<A> - Interface in com.svenruppert.jsentinel.authorization.api: Evaluates access and returns a semantic adapter-neutral decision.
authorizationService() - Static method in class com.svenruppert.jsentinel.authorization.api.JSentinelServiceResolver: Returns the registered AuthorizationService.
authorizationService() - Method in class com.svenruppert.jsentinel.authorization.api.permissions.PermissionBasedAccessEvaluator: Returns the authorization service used to resolve permissions.
authorizationService() - Method in interface com.svenruppert.jsentinel.authorization.api.roles.RoleBasedAccessEvaluatorAPI: Resolves the AuthorizationService via SPI using JSentinelServiceResolver.
AuthorizationService - Interface in com.svenruppert.jsentinel.authorization.api: Maps a user subject to its authorization data.

B

BearerToken - Record Class in com.svenruppert.jsentinel.credential.propagation: Opaque bearer token, typically carried as Authorization: Bearer <value>.
BearerToken(String) - Constructor for record class com.svenruppert.jsentinel.credential.propagation.BearerToken: Convenience constructor that fills the three optional fields with Optional.empty().
BearerToken(String, Optional, Optional, Optional) - Constructor for record class com.svenruppert.jsentinel.credential.propagation.BearerToken: Creates an instance of a BearerToken record class.
beforeAttempt(LoginAttemptContext) - Method in class com.svenruppert.jsentinel.bruteforce.InMemoryLoginAttemptPolicy
beforeAttempt(LoginAttemptContext) - Method in interface com.svenruppert.jsentinel.bruteforce.LoginAttemptPolicy: Decides whether the attempt described by context may proceed.
beforeAttempt(LoginAttemptContext) - Method in class com.svenruppert.jsentinel.bruteforce.NoopLoginAttemptPolicy
beforeAttempt(LoginAttemptContext) - Method in class com.svenruppert.jsentinel.bruteforce.StoreBackedLoginAttemptPolicy
beforeNavigation(SessionContext) - Method in class com.svenruppert.jsentinel.session.NoopSessionPolicy
beforeNavigation(SessionContext) - Method in interface com.svenruppert.jsentinel.session.SessionPolicy: Called before each protected navigation.
beforeNavigation(SessionContext) - Method in class com.svenruppert.jsentinel.session.TimeoutSessionPolicy
bind(HeaderValue) - Static method in class com.svenruppert.jsentinel.credential.propagation.OutboundHeaderContext: Bind a header to the current thread.
bind(TokenCredential) - Method in class com.svenruppert.jsentinel.credential.propagation.InMemoryTokenCredentialStore
bind(TokenCredential) - Method in interface com.svenruppert.jsentinel.credential.propagation.TokenCredentialStore: Replace any current entry with credential.
Block(Duration, AbuseDimension) - Constructor for record class com.svenruppert.jsentinel.credential.abuse.AbuseDecision.Block: Creates an instance of a Block record class.
BLOCK - Enum constant in enum class com.svenruppert.jsentinel.credential.compromised.CheckFailurePolicy: Treat a failed check as a definitive negative outcome — the change is rejected.
blockAt() - Method in record class com.svenruppert.jsentinel.credential.abuse.AbuseLimitsPolicy.Limit: Returns the value of the blockAt record component.
Blocked() - Constructor for record class com.svenruppert.jsentinel.credential.reset.ResetTokenCreationResult.Blocked: Creates an instance of a Blocked record class.
Blocked(CredentialLifecycleDecision) - Constructor for record class com.svenruppert.jsentinel.credential.change.PasswordChangeResult.Blocked: Creates an instance of a Blocked record class.
BlockedPermanent() - Constructor for record class com.svenruppert.jsentinel.credential.lifecycle.CredentialLifecycleDecision.BlockedPermanent: Creates an instance of a BlockedPermanent record class.
BlockedTemporary() - Constructor for record class com.svenruppert.jsentinel.credential.lifecycle.CredentialLifecycleDecision.BlockedTemporary: Creates an instance of a BlockedTemporary record class.
blockLen() - Method in record class com.svenruppert.jsentinel.credential.abuse.AbuseLimitsPolicy.Limit: Returns the value of the blockLen record component.
BOOTSTRAP_INITIAL_LOCKOUT_ENV - Static variable in class com.svenruppert.jsentinel.bruteforce.LoginAttemptConfigurationLoader
BOOTSTRAP_INITIAL_LOCKOUT_PROPERTY - Static variable in class com.svenruppert.jsentinel.bruteforce.LoginAttemptConfigurationLoader
BOOTSTRAP_MAX_LOCKOUT_ENV - Static variable in class com.svenruppert.jsentinel.bruteforce.LoginAttemptConfigurationLoader
BOOTSTRAP_MAX_LOCKOUT_PROPERTY - Static variable in class com.svenruppert.jsentinel.bruteforce.LoginAttemptConfigurationLoader
BOOTSTRAP_THRESHOLD_ENV - Static variable in class com.svenruppert.jsentinel.bruteforce.LoginAttemptConfigurationLoader
BOOTSTRAP_THRESHOLD_PROPERTY - Static variable in class com.svenruppert.jsentinel.bruteforce.LoginAttemptConfigurationLoader
BOOTSTRAP_WINDOW_ENV - Static variable in class com.svenruppert.jsentinel.bruteforce.LoginAttemptConfigurationLoader
BOOTSTRAP_WINDOW_PROPERTY - Static variable in class com.svenruppert.jsentinel.bruteforce.LoginAttemptConfigurationLoader
BootstrapAdminCreated - Record Class in com.svenruppert.jsentinel.audit: The first administrator was successfully created via the bootstrap flow.
BootstrapAdminCreated(Instant, String, String) - Constructor for record class com.svenruppert.jsentinel.audit.BootstrapAdminCreated: Creates an instance of a BootstrapAdminCreated record class.
BootstrapConfiguration - Record Class in com.svenruppert.jsentinel.bootstrap: Bootstrap configuration record.
BootstrapConfiguration(BootstrapMode, Path, Duration) - Constructor for record class com.svenruppert.jsentinel.bootstrap.BootstrapConfiguration: Creates an instance of a BootstrapConfiguration record class.
BootstrapConfigurationLoader - Class in com.svenruppert.jsentinel.bootstrap: Loads BootstrapConfiguration from system properties and environment variables.
BootstrapConfigurationLoader() - Constructor for class com.svenruppert.jsentinel.bootstrap.BootstrapConfigurationLoader: Default loader reading from System.getProperty(String) and System.getenv(String).
BootstrapConfigurationLoader(Function, Function) - Constructor for class com.svenruppert.jsentinel.bootstrap.BootstrapConfigurationLoader: Test seam: inject custom sources.
BootstrapMode - Enum Class in com.svenruppert.jsentinel.bootstrap: Operating mode of the first-run bootstrap mechanism.
bootstrapRequired() - Method in class com.svenruppert.jsentinel.bootstrap.BootstrapStateService
bootstrapRequired() - Method in record class com.svenruppert.jsentinel.bootstrap.BootstrapStatus: Returns the value of the bootstrapRequired record component.
bootstrapRequired() - Method in class com.svenruppert.jsentinel.bootstrap.StoreBackedBootstrapStateService
BootstrapStartup - Class in com.svenruppert.jsentinel.bootstrap: One-shot startup orchestrator.
BootstrapState - Record Class in com.svenruppert.jsentinel.bootstrap: Persistent first-run-bootstrap state for one tenant.
BootstrapState(TenantId, boolean, Optional) - Constructor for record class com.svenruppert.jsentinel.bootstrap.BootstrapState: Validates record invariants.
BootstrapStateService - Class in com.svenruppert.jsentinel.bootstrap: Single source of truth for "is the system uninitialized?".
BootstrapStateService(AdministratorAccountStore, BootstrapMode) - Constructor for class com.svenruppert.jsentinel.bootstrap.BootstrapStateService
BootstrapStateStore - Interface in com.svenruppert.jsentinel.bootstrap: Persistent store for BootstrapState per tenant.
BootstrapStatus - Record Class in com.svenruppert.jsentinel.bootstrap: Adapter-neutral, leak-safe view of the bootstrap state.
BootstrapStatus(boolean, BootstrapMode) - Constructor for record class com.svenruppert.jsentinel.bootstrap.BootstrapStatus: Creates an instance of a BootstrapStatus record class.
bootstrapToken() - Method in record class com.svenruppert.jsentinel.bootstrap.CreateInitialAdminCommand: Returns the value of the bootstrapToken record component.
BootstrapToken - Record Class in com.svenruppert.jsentinel.bootstrap: One-time bootstrap token.
BootstrapToken(String, Instant) - Constructor for record class com.svenruppert.jsentinel.bootstrap.BootstrapToken: Defensive constructor — rejects null / blank values.
BootstrapTokenGenerator - Class in com.svenruppert.jsentinel.bootstrap: Generates fresh BootstrapTokens using SecureRandom and a 32-character ambiguity-free alphabet (drops O 0 I 1).
BootstrapTokenGenerator() - Constructor for class com.svenruppert.jsentinel.bootstrap.BootstrapTokenGenerator
BootstrapTokenGenerator(SecureRandom, Clock) - Constructor for class com.svenruppert.jsentinel.bootstrap.BootstrapTokenGenerator
BootstrapTokenOutput - Interface in com.svenruppert.jsentinel.bootstrap: Tells the operator how to obtain the current bootstrap token.
BootstrapTokenRejected - Record Class in com.svenruppert.jsentinel.audit: A bootstrap-token submission was rejected.
BootstrapTokenRejected(Instant, String, String) - Constructor for record class com.svenruppert.jsentinel.audit.BootstrapTokenRejected: Creates an instance of a BootstrapTokenRejected record class.
BootstrapTokenStore - Interface in com.svenruppert.jsentinel.bootstrap: Storage for the current bootstrap token.
BruteForceLimitReached - Record Class in com.svenruppert.jsentinel.audit: The login attempt policy locked a username/client because it crossed a failure threshold.
BruteForceLimitReached(Instant, String, String, int, Duration) - Constructor for record class com.svenruppert.jsentinel.audit.BruteForceLimitReached: Creates an instance of a BruteForceLimitReached record class.
build() - Method in class com.svenruppert.jsentinel.authorization.api.permissions.StaticRolePermissionMapping.Builder
build() - Method in class com.svenruppert.jsentinel.authorization.api.roles.StaticRoleHierarchy.Builder: Builds the immutable hierarchy.
build() - Method in class com.svenruppert.jsentinel.credential.abuse.AbuseLimitsPolicy.Builder
build() - Method in class com.svenruppert.jsentinel.credential.password.pepper.InMemoryPepperService.Builder
build() - Method in class com.svenruppert.jsentinel.credential.password.policy.DefaultPasswordHashPolicy.Builder
build() - Method in class com.svenruppert.jsentinel.policy.api.PolicyBuilder: Builds the policy.
builder() - Static method in class com.svenruppert.jsentinel.authorization.api.permissions.StaticRolePermissionMapping: Convenient builder-style starter.
builder() - Static method in class com.svenruppert.jsentinel.authorization.api.roles.StaticRoleHierarchy: Creates a new builder.
builder() - Static method in class com.svenruppert.jsentinel.credential.abuse.AbuseLimitsPolicy
builder() - Static method in class com.svenruppert.jsentinel.credential.password.pepper.InMemoryPepperService: Builder for multi-key configurations (one active + zero or more retired, used by Phase-3 pepper rotation).
builder() - Static method in class com.svenruppert.jsentinel.credential.password.policy.DefaultPasswordHashPolicy
Builder() - Constructor for class com.svenruppert.jsentinel.authorization.api.permissions.StaticRolePermissionMapping.Builder

C

calibrate(Duration) - Method in interface com.svenruppert.jsentinel.credential.password.calibration.ParameterCalibrationService
calibrate(Duration) - Method in class com.svenruppert.jsentinel.credential.password.pbkdf2.Pbkdf2ParameterCalibrator
calibratedAt() - Method in record class com.svenruppert.jsentinel.credential.password.calibration.CalibrationProfile: Returns the value of the calibratedAt record component.
CalibrationProfile - Record Class in com.svenruppert.jsentinel.credential.password.calibration: Reproducible calibration result for a single password-hash algorithm.
CalibrationProfile(String, String, Map, long, long, Instant) - Constructor for record class com.svenruppert.jsentinel.credential.password.calibration.CalibrationProfile: Creates an instance of a CalibrationProfile record class.
CalibrationProfileStore - Class in com.svenruppert.jsentinel.credential.password.calibration: Dependency-free file-based load/save of CalibrationProfile.
CalibrationProfileStore() - Constructor for class com.svenruppert.jsentinel.credential.password.calibration.CalibrationProfileStore
capacity() - Method in class com.svenruppert.jsentinel.audit.RingBufferAuditSink: Returns the configured maximum number of retained events.
change(PasswordChangeCommand) - Method in class com.svenruppert.jsentinel.credential.change.PasswordChangeService
changed() - Method in record class com.svenruppert.jsentinel.credential.emergency.MassCredentialStatusChange.Report: Returns the value of the changed record component.
check(SecretValue) - Method in interface com.svenruppert.jsentinel.credential.compromised.CompromisedPasswordChecker: Evaluates the candidate password.
check(SecretValue) - Method in class com.svenruppert.jsentinel.credential.compromised.LocalBlocklistCompromisedPasswordChecker
check(SecretValue) - Method in class com.svenruppert.jsentinel.credential.compromised.NoOpCompromisedPasswordChecker
check(JSentinelVersionKey, JSentinelVersion) - Method in class com.svenruppert.jsentinel.session.JSentinelVersionCheck: Compares snapshot against store.current(key).
check(SessionRecord) - Method in class com.svenruppert.jsentinel.session.JSentinelVersionCheck: Convenience wrapper around JSentinelVersionCheck.check(JSentinelVersionKey, JSentinelVersion) that pulls the snapshot straight from a SessionRecord.
checkCredentials(T) - Method in interface com.svenruppert.jsentinel.authentication.AuthenticationService: Validates the given credentials.
CheckFailed(CompromisedPasswordResult.FailureReason) - Constructor for record class com.svenruppert.jsentinel.credential.compromised.CompromisedPasswordResult.CheckFailed: Creates an instance of a CheckFailed record class.
CheckFailurePolicy - Enum Class in com.svenruppert.jsentinel.credential.compromised: Operator-configured behaviour when a CompromisedPasswordChecker returns CompromisedPasswordResult.CheckFailed.
checkOnLogin() - Method in record class com.svenruppert.jsentinel.credential.compromised.CompromisedPasswordPolicy: Returns the value of the checkOnLogin record component.
checkOnSetOrChange() - Method in record class com.svenruppert.jsentinel.credential.compromised.CompromisedPasswordPolicy: Returns the value of the checkOnSetOrChange record component.
Clean() - Constructor for record class com.svenruppert.jsentinel.credential.compromised.CompromisedPasswordResult.Clean: Creates an instance of a Clean record class.
clear() - Method in class com.svenruppert.jsentinel.audit.RingBufferAuditSink: Drops every retained event.
clear() - Method in class com.svenruppert.jsentinel.credential.propagation.InMemoryTokenCredentialStore
clear() - Static method in class com.svenruppert.jsentinel.credential.propagation.OutboundHeaderContext: Reset the slot.
clear() - Method in interface com.svenruppert.jsentinel.credential.propagation.TokenCredentialStore: Reset to the empty state.
clearAll(SubjectId) - Method in class com.svenruppert.jsentinel.logout.InMemorySubjectSessionRegistry
clearAll(SubjectId) - Method in class com.svenruppert.jsentinel.logout.StoreBackedSubjectSessionRegistry
clearAll(SubjectId) - Method in interface com.svenruppert.jsentinel.logout.SubjectSessionRegistry: Forgets every association for subjectId.
clearRoles(RoleAssignmentKey) - Method in class com.svenruppert.jsentinel.authorization.api.roles.InMemoryRoleAssignmentStore
clearRoles(RoleAssignmentKey) - Method in interface com.svenruppert.jsentinel.authorization.api.roles.RoleAssignmentStore: Clears every role assigned to key.
CLIENT_ADDRESS - Enum constant in enum class com.svenruppert.jsentinel.credential.abuse.AbuseDimension: Per-client-address counter — defends against client-level abuse.
clientAddress() - Method in record class com.svenruppert.jsentinel.audit.BootstrapAdminCreated: Returns the value of the clientAddress record component.
clientAddress() - Method in record class com.svenruppert.jsentinel.audit.BootstrapTokenRejected: Returns the value of the clientAddress record component.
clientAddress() - Method in record class com.svenruppert.jsentinel.audit.BruteForceLimitReached: Returns the value of the clientAddress record component.
clientAddress() - Method in record class com.svenruppert.jsentinel.audit.CredentialVerificationFailed: Returns the value of the clientAddress record component.
clientAddress() - Method in record class com.svenruppert.jsentinel.audit.CredentialVerificationSucceeded: Returns the value of the clientAddress record component.
clientAddress() - Method in record class com.svenruppert.jsentinel.audit.LoginFailed: Returns the value of the clientAddress record component.
clientAddress() - Method in record class com.svenruppert.jsentinel.audit.LoginSucceeded: Returns the value of the clientAddress record component.
clientAddress() - Method in record class com.svenruppert.jsentinel.bruteforce.LoginAttemptContext: Returns the value of the clientAddress record component.
clientAddress() - Method in record class com.svenruppert.jsentinel.credential.abuse.AbuseAttemptContext: Returns the value of the clientAddress record component.
clientAddress() - Method in record class com.svenruppert.jsentinel.session.SessionContext: Returns the value of the clientAddress record component.
close() - Method in interface com.svenruppert.jsentinel.credential.password.limiter.KdfExecutionLimiter.Lease
close() - Method in class com.svenruppert.jsentinel.credential.secret.SecretValue: Alias for SecretValue.destroy() so SecretValue can be used in try-with-resources blocks.
Cluster note - Section in interface com.svenruppert.jsentinel.credential.abuse.AbuseDetectionService
com.svenruppert.jsentinel.accountlifecycle - package com.svenruppert.jsentinel.accountlifecycle
com.svenruppert.jsentinel.action - package com.svenruppert.jsentinel.action
com.svenruppert.jsentinel.annotations - package com.svenruppert.jsentinel.annotations
com.svenruppert.jsentinel.audit - package com.svenruppert.jsentinel.audit
com.svenruppert.jsentinel.authentication - package com.svenruppert.jsentinel.authentication
com.svenruppert.jsentinel.authorization.annotations - package com.svenruppert.jsentinel.authorization.annotations
com.svenruppert.jsentinel.authorization.api - package com.svenruppert.jsentinel.authorization.api
com.svenruppert.jsentinel.authorization.api.operations - package com.svenruppert.jsentinel.authorization.api.operations
com.svenruppert.jsentinel.authorization.api.permissions - package com.svenruppert.jsentinel.authorization.api.permissions
com.svenruppert.jsentinel.authorization.api.roles - package com.svenruppert.jsentinel.authorization.api.roles
com.svenruppert.jsentinel.authorization.api.tenant - package com.svenruppert.jsentinel.authorization.api.tenant
com.svenruppert.jsentinel.authorization.impl - package com.svenruppert.jsentinel.authorization.impl
com.svenruppert.jsentinel.authorization.navigation - package com.svenruppert.jsentinel.authorization.navigation
com.svenruppert.jsentinel.bootstrap - package com.svenruppert.jsentinel.bootstrap
com.svenruppert.jsentinel.bruteforce - package com.svenruppert.jsentinel.bruteforce
com.svenruppert.jsentinel.credential - package com.svenruppert.jsentinel.credential
com.svenruppert.jsentinel.credential.abuse - package com.svenruppert.jsentinel.credential.abuse
com.svenruppert.jsentinel.credential.change - package com.svenruppert.jsentinel.credential.change
com.svenruppert.jsentinel.credential.compromised - package com.svenruppert.jsentinel.credential.compromised
com.svenruppert.jsentinel.credential.emergency - package com.svenruppert.jsentinel.credential.emergency
com.svenruppert.jsentinel.credential.history - package com.svenruppert.jsentinel.credential.history
com.svenruppert.jsentinel.credential.input - package com.svenruppert.jsentinel.credential.input
com.svenruppert.jsentinel.credential.lifecycle - package com.svenruppert.jsentinel.credential.lifecycle
com.svenruppert.jsentinel.credential.metrics - package com.svenruppert.jsentinel.credential.metrics
com.svenruppert.jsentinel.credential.password - package com.svenruppert.jsentinel.credential.password
com.svenruppert.jsentinel.credential.password.audit - package com.svenruppert.jsentinel.credential.password.audit
com.svenruppert.jsentinel.credential.password.calibration - package com.svenruppert.jsentinel.credential.password.calibration
com.svenruppert.jsentinel.credential.password.dummy - package com.svenruppert.jsentinel.credential.password.dummy
com.svenruppert.jsentinel.credential.password.envelope - package com.svenruppert.jsentinel.credential.password.envelope
com.svenruppert.jsentinel.credential.password.limiter - package com.svenruppert.jsentinel.credential.password.limiter
com.svenruppert.jsentinel.credential.password.pbkdf2 - package com.svenruppert.jsentinel.credential.password.pbkdf2
com.svenruppert.jsentinel.credential.password.pepper - package com.svenruppert.jsentinel.credential.password.pepper
com.svenruppert.jsentinel.credential.password.policy - package com.svenruppert.jsentinel.credential.password.policy
com.svenruppert.jsentinel.credential.password.provider - package com.svenruppert.jsentinel.credential.password.provider
com.svenruppert.jsentinel.credential.password.rehash - package com.svenruppert.jsentinel.credential.password.rehash
com.svenruppert.jsentinel.credential.propagation - package com.svenruppert.jsentinel.credential.propagation: V00.74 declarative token-propagation SPIs.
com.svenruppert.jsentinel.credential.reset - package com.svenruppert.jsentinel.credential.reset
com.svenruppert.jsentinel.credential.secret - package com.svenruppert.jsentinel.credential.secret
com.svenruppert.jsentinel.credential.standards - package com.svenruppert.jsentinel.credential.standards
com.svenruppert.jsentinel.credential.store - package com.svenruppert.jsentinel.credential.store
com.svenruppert.jsentinel.credential.tenant - package com.svenruppert.jsentinel.credential.tenant
com.svenruppert.jsentinel.credential.token - package com.svenruppert.jsentinel.credential.token
com.svenruppert.jsentinel.logout - package com.svenruppert.jsentinel.logout
com.svenruppert.jsentinel.policy.api - package com.svenruppert.jsentinel.policy.api
com.svenruppert.jsentinel.policy.impl - package com.svenruppert.jsentinel.policy.impl
com.svenruppert.jsentinel.policy.spi - package com.svenruppert.jsentinel.policy.spi
com.svenruppert.jsentinel.ratelimiting - package com.svenruppert.jsentinel.ratelimiting
com.svenruppert.jsentinel.session - package com.svenruppert.jsentinel.session
compareTo(JSentinelVersion) - Method in record class com.svenruppert.jsentinel.session.JSentinelVersion
completed(TenantId, Instant) - Static method in record class com.svenruppert.jsentinel.bootstrap.BootstrapState: Builds the "bootstrap completed" state for tenant.
CompositeAuditService - Class in com.svenruppert.jsentinel.audit: JSentinelAuditService that fans every published event out to: a primary RingBufferAuditSink used as the query backend, and zero or more additional AuditSinks (logging, file, SIEM, …). Every sink runs independently — a failing extra sink does not stop the fan-out and never causes publish(...) to throw.
CompositeAuditService(RingBufferAuditSink, AuditSink...) - Constructor for class com.svenruppert.jsentinel.audit.CompositeAuditService
COMPROMISED - Enum constant in enum class com.svenruppert.jsentinel.credential.store.CredentialStatus
CompromisedPasswordChecker - Interface in com.svenruppert.jsentinel.credential.compromised: SPI for compromised-password lookups.
CompromisedPasswordPolicy - Record Class in com.svenruppert.jsentinel.credential.compromised: Operator-controlled policy that governs when the compromised password check runs and how a failed check is interpreted.
CompromisedPasswordPolicy(boolean, boolean, CheckFailurePolicy) - Constructor for record class com.svenruppert.jsentinel.credential.compromised.CompromisedPasswordPolicy: Creates an instance of a CompromisedPasswordPolicy record class.
CompromisedPasswordResult - Interface in com.svenruppert.jsentinel.credential.compromised: Sealed result of a CompromisedPasswordChecker call.
CompromisedPasswordResult.CheckFailed - Record Class in com.svenruppert.jsentinel.credential.compromised: The checker could not produce a verdict — network outage, malformed response, timeout, etc.
CompromisedPasswordResult.Clean - Record Class in com.svenruppert.jsentinel.credential.compromised: The candidate password is not present in the checker's data source.
CompromisedPasswordResult.FailureReason - Enum Class in com.svenruppert.jsentinel.credential.compromised: Structured failure reason — never carries password material, URLs or response bodies.
CompromisedPasswordResult.Pwned - Record Class in com.svenruppert.jsentinel.credential.compromised: The candidate password matched a known compromised entry.
Config(int, Duration, int, Duration, int, Duration) - Constructor for record class com.svenruppert.jsentinel.credential.abuse.AbusePatternMonitor.Config: Creates an instance of a Config record class.
Config(Duration, Duration, boolean, String) - Constructor for record class com.svenruppert.jsentinel.session.TimeoutSessionPolicy.Config: Creates an instance of a Config record class.
Conflict() - Constructor for record class com.svenruppert.jsentinel.credential.change.PasswordChangeResult.Conflict: Creates an instance of a Conflict record class.
ConsoleBootstrapTokenOutput - Class in com.svenruppert.jsentinel.bootstrap: Prints a one-time setup banner with the actual bootstrap token to the server console.
ConsoleBootstrapTokenOutput(PrintStream, String) - Constructor for class com.svenruppert.jsentinel.bootstrap.ConsoleBootstrapTokenOutput
ConsoleBootstrapTokenOutput(String) - Constructor for class com.svenruppert.jsentinel.bootstrap.ConsoleBootstrapTokenOutput
consume(String) - Method in class com.svenruppert.jsentinel.accountlifecycle.EmailVerificationService: Marks the token consumed exactly once, emits EmailVerified and a JSentinelNotification.Kind.EMAIL_VERIFIED notification.
consume(String) - Method in class com.svenruppert.jsentinel.accountlifecycle.PasswordResetService: Marks the supplied plain token consumed and publishes a PasswordResetCompleted audit + a JSentinelNotification.Kind.PASSWORD_RESET_COMPLETED notification.
consume(String, SecretValue) - Method in class com.svenruppert.jsentinel.credential.reset.PasswordResetService: Consumes the supplied wire token, atomically replacing the credential's hash with the supplied new password and marking the token CONSUMED.
Consume - Section in class com.svenruppert.jsentinel.credential.reset.PasswordResetService
CONSUMED - Enum constant in enum class com.svenruppert.jsentinel.credential.reset.ResetTokenStatus
consumedAt() - Method in record class com.svenruppert.jsentinel.accountlifecycle.EmailVerificationTokenRecord: Returns the value of the consumedAt record component.
consumedAt() - Method in record class com.svenruppert.jsentinel.accountlifecycle.PasswordResetTokenRecord: Returns the value of the consumedAt record component.
cont() - Static method in interface com.svenruppert.jsentinel.session.SessionDecision: Returns the shared SessionDecision.Continue singleton.
CONTAINS_CONTROL_CHARACTER - Enum constant in enum class com.svenruppert.jsentinel.credential.input.PasswordInputViolation
CONTAINS_EMAIL_DOMAIN - Enum constant in enum class com.svenruppert.jsentinel.credential.input.PasswordInputViolation: Password contains the domain part of the user's email address.
CONTAINS_EMAIL_LOCAL_PART - Enum constant in enum class com.svenruppert.jsentinel.credential.input.PasswordInputViolation: Password contains the local part of the user's email address.
CONTAINS_FORBIDDEN_TERM - Enum constant in enum class com.svenruppert.jsentinel.credential.input.PasswordInputViolation: Password contains an operator-supplied forbidden term.
CONTAINS_USERNAME - Enum constant in enum class com.svenruppert.jsentinel.credential.input.PasswordInputViolation: Password contains the user's username (case-insensitive).
containsAll(Collection, Collection) - Static method in class com.svenruppert.jsentinel.authorization.api.permissions.PermissionMatcher: Checks whether all required permissions are covered by the granted set.
containsAny(Collection, Collection) - Static method in class com.svenruppert.jsentinel.authorization.api.permissions.PermissionMatcher: Checks whether at least one required permission is covered by the granted set.
containsAny(Collection, Collection) - Static method in class com.svenruppert.jsentinel.authorization.api.roles.RoleMatcher: Checks whether any required role is present in the granted set.
containsAnyImplied(Collection, Collection, RoleHierarchy) - Static method in class com.svenruppert.jsentinel.authorization.api.roles.RoleMatcher: Checks whether any required role is satisfied by the granted set under the given RoleHierarchy.
ContextAwarePasswordValidator - Class in com.svenruppert.jsentinel.credential.input: Context-aware password validator that wraps the structural PasswordInputValidator with the checks the Konzept §14 mandates: a password must not contain its user's username, the local part of their email, the email domain, or any of the operator-supplied forbidden terms (CWE-521 / CWE-287).
ContextAwarePasswordValidator() - Constructor for class com.svenruppert.jsentinel.credential.input.ContextAwarePasswordValidator
ContextAwarePasswordValidator(PasswordInputValidator) - Constructor for class com.svenruppert.jsentinel.credential.input.ContextAwarePasswordValidator
ContextPredicates - Class in com.svenruppert.jsentinel.policy.api: Predicate factories that branch on fields of the wrapped AccessContext — the operation name, the resource type, and the adapter-provided attribute map.
Continue() - Constructor for record class com.svenruppert.jsentinel.session.JSentinelVersionEnforcer.EnforcementOutcome.Continue: Creates an instance of a Continue record class.
Continue() - Constructor for record class com.svenruppert.jsentinel.session.SessionDecision.Continue: Creates an instance of a Continue record class.
CONTINUE - Static variable in interface com.svenruppert.jsentinel.session.JSentinelVersionEnforcer.EnforcementOutcome: Singleton shared "request continues" outcome.
copyKey() - Method in record class com.svenruppert.jsentinel.credential.password.pepper.PepperReference: Returns a fresh copy of the key bytes.
copyVerifierDigest() - Method in record class com.svenruppert.jsentinel.credential.token.TokenDigestRecord: Returns a fresh copy of the digest bytes.
countSince(RateLimitKey, Instant) - Method in class com.svenruppert.jsentinel.ratelimiting.InMemoryRateLimitStore
countSince(RateLimitKey, Instant) - Method in interface com.svenruppert.jsentinel.ratelimiting.RateLimitStore: Returns the number of events under key whose timestamp is at or after since.
createAdministrator(NewAdministrator) - Method in interface com.svenruppert.jsentinel.bootstrap.AdministratorAccountStore: Persists the freshly created initial administrator.
Created(SelectorVerifierToken) - Constructor for record class com.svenruppert.jsentinel.credential.reset.ResetTokenCreationResult.Created: Creates an instance of a Created record class.
Created(String) - Constructor for record class com.svenruppert.jsentinel.bootstrap.InitialAdminCreationResult.Created: Creates an instance of a Created record class.
createdAt() - Method in record class com.svenruppert.jsentinel.accountlifecycle.EmailVerificationTokenRecord: Returns the value of the createdAt record component.
createdAt() - Method in record class com.svenruppert.jsentinel.accountlifecycle.PasswordResetTokenRecord: Returns the value of the createdAt record component.
createdAt() - Method in record class com.svenruppert.jsentinel.authentication.ApiKeyRecord: Returns the value of the createdAt record component.
createdAt() - Method in record class com.svenruppert.jsentinel.authentication.RefreshTokenRecord: Returns the value of the createdAt record component.
createdAt() - Method in record class com.svenruppert.jsentinel.authentication.RememberMeTokenRecord: Returns the value of the createdAt record component.
createdAt() - Method in record class com.svenruppert.jsentinel.bootstrap.BootstrapToken: Returns the value of the createdAt record component.
createdAt() - Method in record class com.svenruppert.jsentinel.credential.store.CredentialRecord: Returns the value of the createdAt record component.
createdAt() - Method in record class com.svenruppert.jsentinel.session.SessionContext: Returns the value of the createdAt record component.
createdAt() - Method in record class com.svenruppert.jsentinel.session.SessionMetadata: Returns the value of the createdAt record component.
createdAt() - Method in record class com.svenruppert.jsentinel.session.SessionRecord: Returns the value of the createdAt record component.
createdBy() - Method in record class com.svenruppert.jsentinel.audit.UserCreated: Returns the value of the createdBy record component.
createInitialAdmin(CreateInitialAdminCommand) - Method in class com.svenruppert.jsentinel.bootstrap.InitialAdminBootstrapService
CreateInitialAdminCommand - Record Class in com.svenruppert.jsentinel.bootstrap: Command consumed by InitialAdminBootstrapService.createInitialAdmin(CreateInitialAdminCommand).
CreateInitialAdminCommand(String, String, char[], String, String) - Constructor for record class com.svenruppert.jsentinel.bootstrap.CreateInitialAdminCommand: Defensive constructor — rejects null token, username, password.
CREDENTIAL_STUFFING - Enum constant in enum class com.svenruppert.jsentinel.credential.abuse.AbusePattern: Many distinct clients hammering the same username — a stuffing attack with a leaked credential.
CredentialAuditPublisher - Class in com.svenruppert.jsentinel.credential.password.audit: Translates CredentialVerificationResults into the new credential audit events and pushes them through JSentinelAuditService.
CredentialAuditPublisher(JSentinelAuditService) - Constructor for class com.svenruppert.jsentinel.credential.password.audit.CredentialAuditPublisher
CredentialAuditPublisher(JSentinelAuditService, Clock) - Constructor for class com.svenruppert.jsentinel.credential.password.audit.CredentialAuditPublisher
CredentialJSentinelMetrics - Interface in com.svenruppert.jsentinel.credential.metrics: Backend-neutral sink for CredentialMetricEvents.
CredentialLifecycleDecision - Interface in com.svenruppert.jsentinel.credential.lifecycle: Adapter-neutral decision derived from a credential's current lifecycle status.
CredentialLifecycleDecision.BlockedPermanent - Record Class in com.svenruppert.jsentinel.credential.lifecycle: Permanent block (typically COMPROMISED or DISABLED).
CredentialLifecycleDecision.BlockedTemporary - Record Class in com.svenruppert.jsentinel.credential.lifecycle: Temporary block (typically LOCKED).
CredentialLifecycleDecision.ForcePasswordChange - Record Class in com.svenruppert.jsentinel.credential.lifecycle: Credentials verified, but the user must change the password before the session may proceed.
CredentialLifecycleDecision.Proceed - Record Class in com.svenruppert.jsentinel.credential.lifecycle: Normal login allowed.
CredentialLifecycleDecision.ResetInProgress - Record Class in com.svenruppert.jsentinel.credential.lifecycle: A reset token is outstanding for this credential.
CredentialLifecycleService - Class in com.svenruppert.jsentinel.credential.lifecycle: Owns the lifecycle of stored credentials and the rules for moving between CredentialStatus values.
CredentialLifecycleService(CredentialStore, JSentinelAuditService, Clock) - Constructor for class com.svenruppert.jsentinel.credential.lifecycle.CredentialLifecycleService
CredentialMetricEvent - Interface in com.svenruppert.jsentinel.credential.metrics: Sealed family of data-minimised metric events emitted by security-core.
CredentialMetricEvent.AbuseSignal - Record Class in com.svenruppert.jsentinel.credential.metrics: Abuse pattern detector fired.
CredentialMetricEvent.HashDuration - Record Class in com.svenruppert.jsentinel.credential.metrics: One PasswordHashingService.hash call completed.
CredentialMetricEvent.KdfLimiterRejection - Record Class in com.svenruppert.jsentinel.credential.metrics: The KDF execution limiter shed an inbound verification.
CredentialMetricEvent.LifecycleTransition - Record Class in com.svenruppert.jsentinel.credential.metrics: A credential moved between lifecycle states.
CredentialMetricEvent.RehashRequested - Record Class in com.svenruppert.jsentinel.credential.metrics: A successful verification triggered a transparent rehash.
CredentialMetricEvent.VerifyDuration - Record Class in com.svenruppert.jsentinel.credential.metrics: One PasswordHashingService.verify call completed.
CredentialRecord - Record Class in com.svenruppert.jsentinel.credential.store: Persisted credential row, returned by CredentialStore reads and used as the compare-and-swap witness on writes.
CredentialRecord(String, String, CredentialStatus, long, Instant, Instant) - Constructor for record class com.svenruppert.jsentinel.credential.store.CredentialRecord: Creates an instance of a CredentialRecord record class.
CredentialRehashed - Record Class in com.svenruppert.jsentinel.audit: A successful verification triggered a transparent rehash of the stored credential.
CredentialRehashed(Instant, String, String, String, RehashReason, int) - Constructor for record class com.svenruppert.jsentinel.audit.CredentialRehashed: Creates an instance of a CredentialRehashed record class.
CredentialStatus - Enum Class in com.svenruppert.jsentinel.credential.store: Lifecycle state of a stored credential.
CredentialStatusChanged - Record Class in com.svenruppert.jsentinel.audit: Credential lifecycle status transitioned from fromStatus to toStatus.
CredentialStatusChanged(Instant, String, CredentialStatus, CredentialStatus, String) - Constructor for record class com.svenruppert.jsentinel.audit.CredentialStatusChanged: Creates an instance of a CredentialStatusChanged record class.
CredentialStore - Interface in com.svenruppert.jsentinel.credential.store: Persistence-neutral credential store.
credentialType() - Method in record class com.svenruppert.jsentinel.credential.password.CredentialVerificationResult.Verified: Returns the value of the credentialType record component.
credentialType() - Method in record class com.svenruppert.jsentinel.credential.password.envelope.PasswordHashEnvelope: Returns the value of the credentialType record component.
credentialType() - Method in record class com.svenruppert.jsentinel.credential.password.PasswordHashResult: Returns the value of the credentialType record component.
CredentialType - Enum Class in com.svenruppert.jsentinel.credential: Discriminating metadatum for the credential subsystem introduced with version 00.71.00.
CredentialUpdateResult - Interface in com.svenruppert.jsentinel.credential.store: Outcome of a compare-and-swap update against the CredentialStore.
CredentialUpdateResult.NotFound - Record Class in com.svenruppert.jsentinel.credential.store: No record existed under the supplied username.
CredentialUpdateResult.Stale - Record Class in com.svenruppert.jsentinel.credential.store: The witness did not match the persisted record.
CredentialUpdateResult.Updated - Record Class in com.svenruppert.jsentinel.credential.store: The CAS succeeded; newRecord is the value now stored.
CredentialVerificationFailed - Record Class in com.svenruppert.jsentinel.audit: Failed password verification, carrying the internal differentiated classification so audit sinks can distinguish unknown user from wrong password, broken envelope, missing provider or rejected pepper key.
CredentialVerificationFailed(Instant, String, String, InternalAuditEventType) - Constructor for record class com.svenruppert.jsentinel.audit.CredentialVerificationFailed: Creates an instance of a CredentialVerificationFailed record class.
CredentialVerificationResult - Interface in com.svenruppert.jsentinel.credential.password: Structured outcome of a credential verification.
CredentialVerificationResult.Failed - Record Class in com.svenruppert.jsentinel.credential.password: Verification did not succeed.
CredentialVerificationResult.Verified - Record Class in com.svenruppert.jsentinel.credential.password: Successful verification.
CredentialVerificationSucceeded - Record Class in com.svenruppert.jsentinel.audit: Successful password verification, recorded by the credential audit publisher so audit sinks see the same outcome the LoginAttemptPolicy recorded.
CredentialVerificationSucceeded(Instant, String, String, String, String, int, boolean, boolean) - Constructor for record class com.svenruppert.jsentinel.audit.CredentialVerificationSucceeded: Creates an instance of a CredentialVerificationSucceeded record class.
current() - Method in class com.svenruppert.jsentinel.credential.propagation.InMemoryTokenCredentialStore
current() - Static method in class com.svenruppert.jsentinel.credential.propagation.OutboundHeaderContext
current() - Method in interface com.svenruppert.jsentinel.credential.propagation.TokenCredentialStore
current() - Method in interface com.svenruppert.jsentinel.session.JSentinelVersionStatus
current() - Method in record class com.svenruppert.jsentinel.session.JSentinelVersionStatus.Current
current() - Method in record class com.svenruppert.jsentinel.session.JSentinelVersionStatus.Drifted: Returns the value of the current record component.
current(JSentinelVersionKey) - Method in class com.svenruppert.jsentinel.session.InMemoryJSentinelVersionStore
current(JSentinelVersionKey) - Method in interface com.svenruppert.jsentinel.session.JSentinelVersionStore: Returns the current JSentinelVersion associated with key.
Current(JSentinelVersion) - Constructor for record class com.svenruppert.jsentinel.session.JSentinelVersionStatus.Current: Validates the component.
CURRENT - Static variable in enum class com.svenruppert.jsentinel.credential.password.envelope.PasswordHashFormatVersion: Format that newly produced envelopes should declare.
currentPassword() - Method in record class com.svenruppert.jsentinel.credential.change.PasswordChangeCommand: Returns the value of the currentPassword record component.
CurrentPasswordRejected() - Constructor for record class com.svenruppert.jsentinel.credential.change.PasswordChangeResult.CurrentPasswordRejected: Creates an instance of a CurrentPasswordRejected record class.
CurrentSession - Enum constant in enum class com.svenruppert.jsentinel.logout.LogoutScope: Log the subject out of the session associated with the current thread / request.
currentSubject(Class) - Method in interface com.svenruppert.jsentinel.authorization.api.SubjectStore: Returns the current subject, if one is present in the store.
currentVersion() - Method in record class com.svenruppert.jsentinel.audit.SessionStale: Returns the value of the currentVersion record component.

D

decide(PasswordHashEnvelope, PasswordHashPolicy) - Method in class com.svenruppert.jsentinel.credential.password.rehash.RehashDecisionEngine: Legacy two-argument overload that ignores pepper rotation.
decide(PasswordHashEnvelope, PasswordHashPolicy, Optional) - Method in class com.svenruppert.jsentinel.credential.password.rehash.RehashDecisionEngine
decide(CredentialStatus) - Method in class com.svenruppert.jsentinel.credential.lifecycle.CredentialLifecycleService: Pure decision: maps stored status onto the adapter-neutral lifecycle decision.
decision() - Method in record class com.svenruppert.jsentinel.audit.PolicyEvaluated: Returns the value of the decision record component.
decision() - Method in record class com.svenruppert.jsentinel.credential.change.PasswordChangeResult.Blocked: Returns the value of the decision record component.
Decisions - Section in class com.svenruppert.jsentinel.session.TimeoutSessionPolicy
Decision side - Section in class com.svenruppert.jsentinel.credential.lifecycle.CredentialLifecycleService
declaredAudience() - Method in record class com.svenruppert.jsentinel.credential.propagation.OutboundCall: Returns the value of the declaredAudience record component.
decode(String) - Method in class com.svenruppert.jsentinel.credential.password.envelope.PasswordHashCodec: Parses the given wire-form string into a PasswordHashRecord.
DEFAULT - Static variable in record class com.svenruppert.jsentinel.authorization.api.tenant.TenantId: Sentinel tenant that single-tenant applications and tenant-unaware call sites use without further configuration.
DEFAULT - Static variable in class com.svenruppert.jsentinel.credential.password.envelope.PasswordHashCodec: Shared default instance.
DEFAULT_CAPACITY - Static variable in class com.svenruppert.jsentinel.audit.RingBufferAuditSink: Default capacity if no explicit size is configured.
DEFAULT_ITERATIONS - Static variable in class com.svenruppert.jsentinel.credential.password.pbkdf2.Pbkdf2Defaults: Phase-1a default iteration count.
DEFAULT_KEY_LENGTH - Static variable in class com.svenruppert.jsentinel.credential.password.pbkdf2.Pbkdf2Defaults: Phase-1a default derived-key length in bytes.
DEFAULT_SALT_LENGTH - Static variable in class com.svenruppert.jsentinel.credential.password.pbkdf2.Pbkdf2Defaults: Phase-1a default salt length in bytes.
DEFAULT_STEP_UP_ROUTE_NAME - Static variable in class com.svenruppert.jsentinel.authorization.api.JSentinelServiceResolver: Default route name an adapter reroutes to when a policy demands step-up.
DEFAULT_TOKEN_BYTES - Static variable in class com.svenruppert.jsentinel.accountlifecycle.EmailVerificationService: Default token entropy in bytes (256 bits).
DEFAULT_TOKEN_BYTES - Static variable in class com.svenruppert.jsentinel.accountlifecycle.PasswordResetService: Default token entropy in bytes (256 bits).
DEFAULT_TOKEN_BYTES - Static variable in class com.svenruppert.jsentinel.authentication.StoreBackedRememberMeService: Default token entropy in bytes (256 bits).
DEFAULT_TOKEN_BYTES - Static variable in class com.svenruppert.jsentinel.authentication.TokenService: Default token entropy in bytes (256 bits).
DEFAULT_VALIDITY - Static variable in record class com.svenruppert.jsentinel.bootstrap.BootstrapConfiguration: Default token lifetime — 24 hours.
DefaultCompositeAuditService - Class in com.svenruppert.jsentinel.audit: No-arg JSentinelAuditService suitable for META-INF/services registration.
DefaultCompositeAuditService() - Constructor for class com.svenruppert.jsentinel.audit.DefaultCompositeAuditService
DefaultDummyVerificationService - Class in com.svenruppert.jsentinel.credential.password.dummy: Reference DummyVerificationService.
DefaultDummyVerificationService(PasswordHashProviderRegistry, PasswordHashPolicy, PasswordHashCodec) - Constructor for class com.svenruppert.jsentinel.credential.password.dummy.DefaultDummyVerificationService
defaultParameters() - Static method in class com.svenruppert.jsentinel.credential.password.pbkdf2.Pbkdf2Defaults: Default parameter map for new PBKDF2 envelopes.
defaultParameters(String) - Method in class com.svenruppert.jsentinel.credential.password.policy.DefaultPasswordHashPolicy
defaultParameters(String) - Method in interface com.svenruppert.jsentinel.credential.password.policy.PasswordHashPolicy: Default parameters the policy emits when producing a fresh hash with the given algorithm.
defaultParameters(String, Map) - Method in class com.svenruppert.jsentinel.credential.password.policy.DefaultPasswordHashPolicy.Builder
DefaultPasswordHashingService - Class in com.svenruppert.jsentinel.credential.password: Reference PasswordHashingService.
DefaultPasswordHashingService(PasswordHashCodec, PasswordHashValidator, PasswordHashProviderRegistry, PepperService, PasswordHashPolicy, RehashDecisionEngine, KdfExecutionLimiter, DummyVerificationService) - Constructor for class com.svenruppert.jsentinel.credential.password.DefaultPasswordHashingService
DefaultPasswordHashingService.KdfLimitExceededException - Exception Class in com.svenruppert.jsentinel.credential.password: Thrown by DefaultPasswordHashingService.hash(char[]) when the limiter is saturated.
DefaultPasswordHashPolicy - Class in com.svenruppert.jsentinel.credential.password.policy: Reference PasswordHashPolicy backed by explicit, immutable maps.
DefaultPasswordHashPolicy.Builder - Class in com.svenruppert.jsentinel.credential.password.policy: Mutable assembler.
DefaultPasswordHashValidator - Class in com.svenruppert.jsentinel.credential.password.policy: Reference PasswordHashValidator.
DefaultPasswordHashValidator(PasswordHashParameterValidatorRegistry) - Constructor for class com.svenruppert.jsentinel.credential.password.policy.DefaultPasswordHashValidator
defaults() - Static method in record class com.svenruppert.jsentinel.bruteforce.LoginAttemptConfiguration: Defaults for normal end-user logins: 5 failures / 15 min window / 15 min initial lockout / 4 h cap.
defaults() - Static method in class com.svenruppert.jsentinel.credential.abuse.AbuseLimitsPolicy: Sensible default policy: 5/10/15 failures per username per 15 minutes for LOGIN; 30 / 60 / 120 per client address per hour (volume counter); no step-up by default.
defaults() - Static method in record class com.svenruppert.jsentinel.credential.abuse.AbusePatternMonitor.Config: Sensible default: 8 distinct usernames per client in 5 min → SPRAYING; 5 distinct clients per username in 15 min → STUFFING; 5 reset attempts per username in 1 h → RESET_ABUSE.
defaults() - Static method in record class com.svenruppert.jsentinel.credential.compromised.CompromisedPasswordPolicy: Defaults: check on set / change only, allow on check failure.
defaults() - Static method in record class com.svenruppert.jsentinel.credential.input.PasswordInputPolicy: OWASP-2023 baseline: 8..1024 characters, NFC normalisation on, control characters allowed.
defaults() - Static method in record class com.svenruppert.jsentinel.credential.password.limiter.KdfResourceBudget: Sensible default for Phase 1a: 16 concurrent verifications, with up to 250 ms blocking on a permit before the limiter rejects.
defaults() - Static method in class com.svenruppert.jsentinel.credential.password.PasswordHashingServices: Builds a fully wired Phase-1a PasswordHashingService from the JDK-only PBKDF2 provider, the reference policy, the no-op pepper service and a semaphore-backed KDF limiter using the default budget.
defaults() - Static method in record class com.svenruppert.jsentinel.session.TimeoutSessionPolicy.Config: Sensible defaults — 30 min idle, 12 h absolute, rotate after login, /login.
defaults(PasswordHashPolicy) - Static method in class com.svenruppert.jsentinel.credential.password.PasswordHashingServices: Builds a fully wired Phase-1a PasswordHashingService that follows the supplied policy.
defaults(PasswordHashPolicy, KdfExecutionLimiter) - Static method in class com.svenruppert.jsentinel.credential.password.PasswordHashingServices: Builds a fully wired Phase-1a PasswordHashingService with a caller-supplied policy and KDF limiter.
defaults(PasswordHashPolicy, KdfExecutionLimiter, PepperService) - Static method in class com.svenruppert.jsentinel.credential.password.PasswordHashingServices: Builds a fully wired Phase-1a PasswordHashingService with a caller-supplied policy, KDF limiter and PepperService.
DefaultTenantAwarePasswordHashPolicyResolver - Class in com.svenruppert.jsentinel.credential.tenant: In-memory TenantAwarePasswordHashPolicyResolver that stores a global default plus optional per-tenant overrides.
DefaultTenantAwarePasswordHashPolicyResolver(PasswordHashPolicy) - Constructor for class com.svenruppert.jsentinel.credential.tenant.DefaultTenantAwarePasswordHashPolicyResolver
DefaultTenantAwarePasswordHashPolicyResolver(PasswordHashPolicy, Map) - Constructor for class com.svenruppert.jsentinel.credential.tenant.DefaultTenantAwarePasswordHashPolicyResolver
DefaultTenantAwarePepperReferenceResolver - Class in com.svenruppert.jsentinel.credential.tenant: In-memory TenantAwarePepperReferenceResolver.
DefaultTenantAwarePepperReferenceResolver(Optional, Map) - Constructor for class com.svenruppert.jsentinel.credential.tenant.DefaultTenantAwarePepperReferenceResolver
delay() - Method in record class com.svenruppert.jsentinel.credential.abuse.AbuseDecision.Delay: Returns the value of the delay record component.
Delay(Duration, AbuseDimension) - Constructor for record class com.svenruppert.jsentinel.credential.abuse.AbuseDecision.Delay: Creates an instance of a Delay record class.
delayAt() - Method in record class com.svenruppert.jsentinel.credential.abuse.AbuseLimitsPolicy.Limit: Returns the value of the delayAt record component.
delayLen() - Method in record class com.svenruppert.jsentinel.credential.abuse.AbuseLimitsPolicy.Limit: Returns the value of the delayLen record component.
delete(TenantId) - Method in interface com.svenruppert.jsentinel.bootstrap.BootstrapStateStore: Removes the recorded state for tenant.
delete(TenantId) - Method in class com.svenruppert.jsentinel.bootstrap.InMemoryBootstrapStateStore
delete(SessionId) - Method in class com.svenruppert.jsentinel.session.InMemorySessionStore
delete(SessionId) - Method in interface com.svenruppert.jsentinel.session.SessionStore: Removes the record for sessionId.
deleteByHash(String) - Method in interface com.svenruppert.jsentinel.authentication.ApiKeyStore: Removes the record for keyHash.
deleteByHash(String) - Method in class com.svenruppert.jsentinel.authentication.InMemoryApiKeyStore
deleteByHash(String) - Method in class com.svenruppert.jsentinel.authentication.InMemoryRememberMeTokenStore
deleteByHash(String) - Method in interface com.svenruppert.jsentinel.authentication.RememberMeTokenStore: Removes the record for the given hash.
deleteBySubject(TenantId, SubjectId) - Method in interface com.svenruppert.jsentinel.accountlifecycle.EmailVerificationTokenStore: Drops every token issued to subjectId within tenant.
deleteBySubject(TenantId, SubjectId) - Method in class com.svenruppert.jsentinel.accountlifecycle.InMemoryEmailVerificationTokenStore
deleteBySubject(TenantId, SubjectId) - Method in class com.svenruppert.jsentinel.accountlifecycle.InMemoryPasswordResetTokenStore
deleteBySubject(TenantId, SubjectId) - Method in interface com.svenruppert.jsentinel.accountlifecycle.PasswordResetTokenStore: Drops every token (consumed or pending) issued to subjectId within tenant.
deleteBySubject(TenantId, SubjectId) - Method in class com.svenruppert.jsentinel.authentication.InMemoryRefreshTokenStore
deleteBySubject(TenantId, SubjectId) - Method in class com.svenruppert.jsentinel.authentication.InMemoryRememberMeTokenStore
deleteBySubject(TenantId, SubjectId) - Method in interface com.svenruppert.jsentinel.authentication.RefreshTokenStore: Drops every token (active, replaced or revoked) issued to subjectId within tenant.
deleteBySubject(TenantId, SubjectId) - Method in interface com.svenruppert.jsentinel.authentication.RememberMeTokenStore: Drops every token issued to subjectId within tenant.
deleteCurrentSubject(Class) - Method in interface com.svenruppert.jsentinel.authorization.api.SubjectStore: Removes the current subject from the store.
deletedBy() - Method in record class com.svenruppert.jsentinel.audit.UserDeleted: Returns the value of the deletedBy record component.
denied(String) - Static method in interface com.svenruppert.jsentinel.policy.api.PolicyDecision: Creates a PolicyDecision.Denied decision.
denied(String, boolean) - Static method in interface com.svenruppert.jsentinel.authorization.navigation.AccessDecision: Compatibility factory for route denial.
Denied(String) - Constructor for record class com.svenruppert.jsentinel.policy.api.PolicyDecision.Denied: Creates an instance of a Denied record class.
deniedWithError(Class, String) - Static method in interface com.svenruppert.jsentinel.authorization.navigation.AccessDecision: Compatibility factory for error denial.
deny(String) - Method in class com.svenruppert.jsentinel.policy.api.PolicyBuilder: Sets the reason returned for the fall-through Denied case (no allow-predicate matched, no deny-predicate matched).
denyIf(Predicate) - Method in class com.svenruppert.jsentinel.policy.api.PolicyBuilder: Adds a deny-predicate.
DEPRECATED_ALGORITHM - Enum constant in enum class com.svenruppert.jsentinel.credential.store.CredentialStatus
description() - Method in record class com.svenruppert.jsentinel.authorization.api.operations.SecuredOperationDescriptor: Returns the value of the description record component.
destroy() - Method in class com.svenruppert.jsentinel.credential.secret.SecretValue: Zeros the internal storage.
digest() - Method in record class com.svenruppert.jsentinel.credential.reset.ResetTokenRecord: Returns the value of the digest record component.
digest(SelectorVerifierToken) - Method in class com.svenruppert.jsentinel.credential.token.TokenDigestService: Returns the persistable digest record for the supplied token.
dimension() - Method in record class com.svenruppert.jsentinel.credential.abuse.AbuseDecision.Block: Returns the value of the dimension record component.
dimension() - Method in record class com.svenruppert.jsentinel.credential.abuse.AbuseDecision.Delay: Returns the value of the dimension record component.
dimension() - Method in record class com.svenruppert.jsentinel.credential.abuse.AbuseDecision.RequireAdditionalCheck: Returns the value of the dimension record component.
disabled() - Static method in record class com.svenruppert.jsentinel.bootstrap.BootstrapConfiguration
disabled() - Static method in record class com.svenruppert.jsentinel.credential.compromised.CompromisedPasswordPolicy: Disabled variant: no check is ever invoked.
disabled() - Static method in record class com.svenruppert.jsentinel.credential.history.PasswordHistoryPolicy: History disabled — the production default.
DISABLED - Enum constant in enum class com.svenruppert.jsentinel.bootstrap.BootstrapMode
DISABLED - Enum constant in enum class com.svenruppert.jsentinel.credential.compromised.CompromisedPasswordResult.FailureReason
DISABLED - Enum constant in enum class com.svenruppert.jsentinel.credential.store.CredentialStatus
displayName() - Method in record class com.svenruppert.jsentinel.authorization.api.JSentinelSubject: Returns the value of the displayName record component.
displayName() - Method in record class com.svenruppert.jsentinel.bootstrap.CreateInitialAdminCommand: Returns the value of the displayName record component.
displayName() - Method in record class com.svenruppert.jsentinel.bootstrap.NewAdministrator: Returns the value of the displayName record component.
distinctTargets() - Method in record class com.svenruppert.jsentinel.credential.abuse.AbusePatternSignal: Returns the value of the distinctTargets record component.
distinctTargets() - Method in record class com.svenruppert.jsentinel.credential.metrics.CredentialMetricEvent.AbuseSignal: Returns the value of the distinctTargets record component.
Drifted(JSentinelVersion, JSentinelVersion) - Constructor for record class com.svenruppert.jsentinel.session.JSentinelVersionStatus.Drifted: Validates the components and asserts they differ.
dummyPath() - Method in record class com.svenruppert.jsentinel.credential.metrics.CredentialMetricEvent.VerifyDuration: Returns the value of the dummyPath record component.
DummyVerificationContext - Enum Class in com.svenruppert.jsentinel.credential.password.dummy: Why the verification pipeline took the dummy KDF path.
DummyVerificationService - Interface in com.svenruppert.jsentinel.credential.password.dummy: Performs a comparable KDF run when the verification pipeline cannot proceed against the supplied envelope (unknown user, malformed envelope, missing provider, unknown pepper key).
durationMicros() - Method in record class com.svenruppert.jsentinel.credential.metrics.CredentialMetricEvent.HashDuration: Returns the value of the durationMicros record component.
durationMicros() - Method in record class com.svenruppert.jsentinel.credential.metrics.CredentialMetricEvent.VerifyDuration: Returns the value of the durationMicros record component.

E

effectiveFrom() - Method in record class com.svenruppert.jsentinel.credential.emergency.EmergencyPolicyOverride: Returns the value of the effectiveFrom record component.
effectiveTo() - Method in record class com.svenruppert.jsentinel.credential.emergency.EmergencyPolicyOverride: Returns the value of the effectiveTo record component.
email() - Method in record class com.svenruppert.jsentinel.accountlifecycle.EmailVerificationTokenRecord: Returns the value of the email record component.
email() - Method in record class com.svenruppert.jsentinel.audit.EmailVerificationRequested: Returns the value of the email record component.
email() - Method in record class com.svenruppert.jsentinel.audit.EmailVerified: Returns the value of the email record component.
email() - Method in record class com.svenruppert.jsentinel.bootstrap.CreateInitialAdminCommand: Returns the value of the email record component.
email() - Method in record class com.svenruppert.jsentinel.bootstrap.NewAdministrator: Returns the value of the email record component.
EMAIL_VERIFICATION_REQUESTED - Enum constant in enum class com.svenruppert.jsentinel.accountlifecycle.JSentinelNotification.Kind: An email-verification token was issued; deliver the plain token.
EMAIL_VERIFIED - Enum constant in enum class com.svenruppert.jsentinel.accountlifecycle.JSentinelNotification.Kind: An email-verification token was consumed; confirm the verification.
emailDomain() - Method in record class com.svenruppert.jsentinel.credential.input.PasswordContext: Returns the value of the emailDomain record component.
emailLocalPart() - Method in record class com.svenruppert.jsentinel.credential.input.PasswordContext: Returns the value of the emailLocalPart record component.
EmailVerificationRequested - Record Class in com.svenruppert.jsentinel.audit: Emitted when an email-verification token is issued for a subject / email pair.
EmailVerificationRequested(Instant, String, String, String) - Constructor for record class com.svenruppert.jsentinel.audit.EmailVerificationRequested: Validates the record components.
EmailVerificationService - Class in com.svenruppert.jsentinel.accountlifecycle: Email-verification workflow over an EmailVerificationTokenStore.
EmailVerificationService(EmailVerificationTokenStore, PasswordHasher, JSentinelAuditService, JSentinelNotificationSender) - Constructor for class com.svenruppert.jsentinel.accountlifecycle.EmailVerificationService: Convenience constructor: tenant TenantId.DEFAULT, system clock, 256-bit token source.
EmailVerificationService(EmailVerificationTokenStore, PasswordHasher, JSentinelAuditService, JSentinelNotificationSender, TenantId, Clock, Supplier) - Constructor for class com.svenruppert.jsentinel.accountlifecycle.EmailVerificationService: Full constructor.
EmailVerificationService.IssuedToken - Record Class in com.svenruppert.jsentinel.accountlifecycle: Tuple returned from request: the plain token (caller forwards it via the notification sender) and the persisted record (handy for tests / audit hooks).
EmailVerificationTokenRecord - Record Class in com.svenruppert.jsentinel.accountlifecycle: Persistent representation of a single email-verification token.
EmailVerificationTokenRecord(String, TenantId, SubjectId, String, Instant, Instant, Optional) - Constructor for record class com.svenruppert.jsentinel.accountlifecycle.EmailVerificationTokenRecord: Validates the record components and normalises null tenant / consumedAt.
EmailVerificationTokenStore - Interface in com.svenruppert.jsentinel.accountlifecycle: Persistent store for EmailVerificationTokenRecords — backs the planned email-verification workflow (V00.70 Phase 7).
EmailVerified - Record Class in com.svenruppert.jsentinel.audit: Emitted when an email-verification token is consumed and the email is considered verified.
EmailVerified(Instant, String, String, String) - Constructor for record class com.svenruppert.jsentinel.audit.EmailVerified: Validates the record components.
EmergencyPolicyOverride - Record Class in com.svenruppert.jsentinel.credential.emergency: Operator-declared, time-bounded credential emergency override.
EmergencyPolicyOverride(String, EmergencyPolicyOverride.Reason, Instant, Instant, String) - Constructor for record class com.svenruppert.jsentinel.credential.emergency.EmergencyPolicyOverride: Creates an instance of a EmergencyPolicyOverride record class.
EmergencyPolicyOverride.Reason - Enum Class in com.svenruppert.jsentinel.credential.emergency: Structured incident category.
emit(BootstrapToken, BootstrapConfiguration) - Method in interface com.svenruppert.jsentinel.bootstrap.BootstrapTokenOutput
emit(BootstrapToken, BootstrapConfiguration) - Method in class com.svenruppert.jsentinel.bootstrap.ConsoleBootstrapTokenOutput
emit(BootstrapToken, BootstrapConfiguration) - Method in class com.svenruppert.jsentinel.bootstrap.FileBootstrapTokenOutput
enabled() - Method in record class com.svenruppert.jsentinel.credential.history.PasswordHistoryPolicy: Returns the value of the enabled record component.
encode() - Method in record class com.svenruppert.jsentinel.credential.token.SelectorVerifierToken: Returns the wire form selector.verifier.
encode(PasswordHashEnvelope) - Method in class com.svenruppert.jsentinel.credential.password.envelope.PasswordHashCodec: Serialises the given envelope into its canonical wire form.
encoded() - Method in record class com.svenruppert.jsentinel.authentication.PasswordHash: Returns the value of the encoded record component.
encoded() - Method in record class com.svenruppert.jsentinel.credential.password.envelope.PasswordHashRecord: Returns the value of the encoded record component.
encodedHash() - Method in record class com.svenruppert.jsentinel.credential.history.PasswordHistoryEntry: Returns the value of the encodedHash record component.
encodedHash() - Method in record class com.svenruppert.jsentinel.credential.password.PasswordHashResult: Returns the value of the encodedHash record component.
encodedHash() - Method in record class com.svenruppert.jsentinel.credential.store.CredentialRecord: Returns the value of the encodedHash record component.
enforce(SubjectId, TenantId, JSentinelVersion, String, String) - Method in class com.svenruppert.jsentinel.session.JSentinelVersionEnforcer: Runs the drift check and emits a SessionStale audit event on drift.
enforce(AnnotatedElement, Class, String) - Static method in class com.svenruppert.jsentinel.authorization.api.JSentinelEnforcer: Reads the security annotation on the supplied methodOrElement (or its declaringClass as fallback), evaluates the configured evaluator, and throws AccessDeniedException when the decision is not Granted.
enforce(Method, Class) - Static method in class com.svenruppert.jsentinel.authorization.api.JSentinelEnforcer: Convenience overload that uses method both as the annotated element and to derive the method name.
envelope() - Method in record class com.svenruppert.jsentinel.credential.password.envelope.PasswordHashRecord: Returns the value of the envelope record component.
envelope() - Method in record class com.svenruppert.jsentinel.credential.password.policy.ValidatedPasswordHash: Returns the value of the envelope record component.
ENVELOPE_DECODE_ERROR - Enum constant in enum class com.svenruppert.jsentinel.credential.password.dummy.DummyVerificationContext
ENVELOPE_VALIDATION_ERROR - Enum constant in enum class com.svenruppert.jsentinel.credential.password.dummy.DummyVerificationContext
equals(Object) - Method in record class com.svenruppert.jsentinel.accountlifecycle.EmailVerificationService.IssuedToken: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.accountlifecycle.EmailVerificationTokenRecord: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.accountlifecycle.JSentinelNotification: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.accountlifecycle.PasswordResetService.IssuedToken: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.accountlifecycle.PasswordResetTokenRecord: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.action.ActionPermission: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.audit.AccessDenied: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.audit.AccessGranted: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.audit.ActionDenied: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.audit.ApiKeyDenied: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.audit.ApiKeyUsed: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.audit.AuditEnvelope: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.audit.AuditQuery: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.audit.BootstrapAdminCreated: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.audit.BootstrapTokenRejected: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.audit.BruteForceLimitReached: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.audit.CredentialRehashed: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.audit.CredentialStatusChanged: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.audit.CredentialVerificationFailed: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.audit.CredentialVerificationSucceeded: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.audit.EmailVerificationRequested: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.audit.EmailVerified: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.audit.LoginFailed: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.audit.LoginSucceeded: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.audit.LogoutPerformed: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.audit.PasswordResetCompleted: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.audit.PasswordResetRequested: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.audit.PolicyEvaluated: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.audit.RateLimitExceeded: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.audit.RoleAssigned: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.audit.RoleRevoked: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.audit.SessionCreated: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.audit.SessionExpired: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.audit.SessionInvalidated: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.audit.SessionStale: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.audit.StepUpChallenged: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.audit.TokenRotated: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.audit.UserCreated: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.audit.UserDeleted: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.authentication.ApiKeyRecord: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.authentication.PasswordHash: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.authentication.RefreshTokenRecord: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.authentication.RememberMeTokenRecord: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.authentication.StoreBackedRememberMeService.IssuedToken: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.authentication.TokenService.TokenPair: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.authorization.api.AuthorizationDecision.Forbidden: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.authorization.api.AuthorizationDecision.Granted: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.authorization.api.AuthorizationDecision.StepUpRequired: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.authorization.api.AuthorizationDecision.Unauthenticated: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.authorization.api.JSentinelSubject: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.authorization.api.operations.SecuredOperationDescriptor: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.authorization.api.permissions.PermissionName: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.authorization.api.roles.RoleAssignmentKey: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.authorization.api.roles.RoleName: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.authorization.api.tenant.TenantId: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.authorization.impl.AnnotationAccessEvaluatorPair: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.authorization.navigation.AccessContext: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.authorization.navigation.AccessDecision.Granted: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.authorization.navigation.AccessDecision.Reroute: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.authorization.navigation.AccessDecision.RerouteToError: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.authorization.navigation.AccessDecision.RerouteWithParameter: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.authorization.navigation.AccessDecision.RerouteWithParameters: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.authorization.navigation.NavigationAccessDecision.AccessDenied: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.authorization.navigation.NavigationAccessDecision.Allowed: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.authorization.navigation.NavigationAccessDecision.AlreadyLoggedIn: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.authorization.navigation.NavigationAccessDecision.LoginRequired: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.authorization.navigation.NavigationJSentinelContext: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.bootstrap.BootstrapConfiguration: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.bootstrap.BootstrapState: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.bootstrap.BootstrapStatus: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.bootstrap.BootstrapToken: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.bootstrap.CreateInitialAdminCommand: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.bootstrap.InitialAdminCreationResult.AlreadyInitialized: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.bootstrap.InitialAdminCreationResult.Created: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.bootstrap.InitialAdminCreationResult.InternalError: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.bootstrap.InitialAdminCreationResult.InvalidBootstrapToken: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.bootstrap.InitialAdminCreationResult.InvalidUsername: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.bootstrap.InitialAdminCreationResult.PasswordPolicyViolation: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.bootstrap.NewAdministrator: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.bootstrap.PasswordPolicy.PasswordPolicyResult: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.bruteforce.LoginAttemptConfiguration: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.bruteforce.LoginAttemptContext: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.bruteforce.LoginAttemptDecision.Allowed: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.bruteforce.LoginAttemptDecision.LockedOut: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.bruteforce.LoginAttemptKey: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.credential.abuse.AbuseAttemptContext: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.credential.abuse.AbuseDecision.Allow: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.credential.abuse.AbuseDecision.Block: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.credential.abuse.AbuseDecision.Delay: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.credential.abuse.AbuseDecision.RequireAdditionalCheck: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.credential.abuse.AbuseLimitsPolicy.Limit: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.credential.abuse.AbusePatternMonitor.Config: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.credential.abuse.AbusePatternSignal: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.credential.change.PasswordChangeCommand: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.credential.change.PasswordChangeResult.Blocked: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.credential.change.PasswordChangeResult.Conflict: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.credential.change.PasswordChangeResult.CurrentPasswordRejected: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.credential.change.PasswordChangeResult.NewPasswordRejected: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.credential.change.PasswordChangeResult.NotFound: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.credential.change.PasswordChangeResult.Succeeded: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.credential.compromised.CompromisedPasswordPolicy: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.credential.compromised.CompromisedPasswordResult.CheckFailed: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.credential.compromised.CompromisedPasswordResult.Clean: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.credential.compromised.CompromisedPasswordResult.Pwned: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.credential.emergency.EmergencyPolicyOverride: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.credential.emergency.MassCredentialStatusChange.Report: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.credential.history.PasswordHistoryDecision.Allowed: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.credential.history.PasswordHistoryDecision.Reused: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.credential.history.PasswordHistoryEntry: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.credential.history.PasswordHistoryPolicy: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.credential.input.PasswordContext: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.credential.input.PasswordInputPolicy: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.credential.input.PasswordInputValidationResult.Accepted: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.credential.input.PasswordInputValidationResult.Rejected: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.credential.lifecycle.CredentialLifecycleDecision.BlockedPermanent: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.credential.lifecycle.CredentialLifecycleDecision.BlockedTemporary: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.credential.lifecycle.CredentialLifecycleDecision.ForcePasswordChange: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.credential.lifecycle.CredentialLifecycleDecision.Proceed: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.credential.lifecycle.CredentialLifecycleDecision.ResetInProgress: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.credential.metrics.CredentialMetricEvent.AbuseSignal: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.credential.metrics.CredentialMetricEvent.HashDuration: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.credential.metrics.CredentialMetricEvent.KdfLimiterRejection: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.credential.metrics.CredentialMetricEvent.LifecycleTransition: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.credential.metrics.CredentialMetricEvent.RehashRequested: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.credential.metrics.CredentialMetricEvent.VerifyDuration: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.credential.password.calibration.CalibrationProfile: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.credential.password.CredentialVerificationResult.Failed: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.credential.password.CredentialVerificationResult.Verified: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.credential.password.envelope.PasswordHashEnvelope: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.credential.password.envelope.PasswordHashRecord: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.credential.password.limiter.KdfResourceBudget: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.credential.password.PasswordHashResult: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.credential.password.pepper.PepperReference: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.credential.password.policy.ValidatedPasswordHash: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.credential.password.provider.ResourceEstimate: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.credential.password.ProviderVerificationResult.Matched: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.credential.password.ProviderVerificationResult.NotMatched: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.credential.password.ProviderVerificationResult.ProviderError: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.credential.password.RehashDecision.NotRequired: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.credential.password.RehashDecision.Required: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.credential.propagation.ApiKey: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.credential.propagation.BearerToken: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.credential.propagation.HeaderValue: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.credential.propagation.OidcAccessToken: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.credential.propagation.OutboundCall: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.credential.propagation.RefreshToken: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.credential.reset.PasswordResetConsumeResult.Failed: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.credential.reset.PasswordResetConsumeResult.Succeeded: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.credential.reset.ResetTokenCreationResult.Blocked: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.credential.reset.ResetTokenCreationResult.Created: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.credential.reset.ResetTokenCreationResult.UnknownUser: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.credential.reset.ResetTokenRecord: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.credential.reset.ResetTokenUpdateResult.NotFound: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.credential.reset.ResetTokenUpdateResult.Stale: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.credential.reset.ResetTokenUpdateResult.Updated: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.credential.standards.FipsProfile: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.credential.store.CredentialRecord: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.credential.store.CredentialUpdateResult.NotFound: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.credential.store.CredentialUpdateResult.Stale: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.credential.store.CredentialUpdateResult.Updated: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.credential.tenant.TenantCredentialContext: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.credential.token.SelectorVerifierToken: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.credential.token.TokenDigestRecord: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.credential.token.TokenVerificationResult.NotMatched: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.credential.token.TokenVerificationResult.SelectorMismatch: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.credential.token.TokenVerificationResult.Verified: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.logout.SubjectId: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.policy.api.PolicyContext: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.policy.api.PolicyDecision.Allowed: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.policy.api.PolicyDecision.Denied: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.policy.api.PolicyDecision.StepUpRequired: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.policy.api.ResourceAccessContext: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.policy.api.ResourceRef: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.ratelimiting.RateLimitDecision.Allowed: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.ratelimiting.RateLimitDecision.Throttled: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.ratelimiting.RateLimitKey: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.session.JSentinelVersion: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.session.JSentinelVersionEnforcer.EnforcementOutcome.Continue: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.session.JSentinelVersionEnforcer.EnforcementOutcome.SessionStale: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.session.JSentinelVersionKey: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.session.JSentinelVersionStatus.Current: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.session.JSentinelVersionStatus.Drifted: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.session.SessionContext: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.session.SessionDecision.Continue: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.session.SessionDecision.Invalidate: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.session.SessionDecision.RequireLogin: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.session.SessionId: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.session.SessionMetadata: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.session.SessionPolicyDecision.AbsoluteLifetimeExceeded: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.session.SessionPolicyDecision.Active: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.session.SessionPolicyDecision.IdleTimeout: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.session.SessionRecord: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.svenruppert.jsentinel.session.TimeoutSessionPolicy.Config: Indicates whether some other object is "equal to" this one.
estimatedCpuTimeMicros() - Method in record class com.svenruppert.jsentinel.credential.password.provider.ResourceEstimate: Returns the value of the estimatedCpuTimeMicros record component.
estimatedMemoryBytes() - Method in record class com.svenruppert.jsentinel.credential.password.provider.ResourceEstimate: Returns the value of the estimatedMemoryBytes record component.
evaluate(AccessContext, A) - Method in interface com.svenruppert.jsentinel.authorization.api.AuthorizationEvaluator: Evaluates access.
evaluate(AccessContext, ProtectedBy) - Method in class com.svenruppert.jsentinel.authorization.api.ProtectedByEvaluator
evaluate(AccessContext, RequiresAllPermissions) - Method in class com.svenruppert.jsentinel.authorization.api.permissions.RequiresAllPermissionsEvaluator
evaluate(AccessContext, RequiresAnyPermission) - Method in class com.svenruppert.jsentinel.authorization.api.permissions.RequiresAnyPermissionEvaluator
evaluate(AccessContext, RequiresPermission) - Method in class com.svenruppert.jsentinel.authorization.api.permissions.RequiresPermissionEvaluator
evaluate(AccessContext, RequiresPolicy) - Method in class com.svenruppert.jsentinel.policy.impl.RequiresPolicyEvaluator
evaluate(AccessContext, RequiresRole) - Method in class com.svenruppert.jsentinel.authorization.api.roles.RequiresRoleEvaluator
evaluate(AccessContext, T) - Method in interface com.svenruppert.jsentinel.authorization.api.AccessEvaluator: Evaluate access and return a Vaadin-free decision.
evaluate(AccessContext, T) - Method in class com.svenruppert.jsentinel.authorization.api.permissions.PermissionBasedAccessEvaluator
evaluate(AccessContext, T) - Method in class com.svenruppert.jsentinel.authorization.api.roles.RoleBasedAccessEvaluator
evaluate(AbuseAttemptContext) - Method in interface com.svenruppert.jsentinel.credential.abuse.AbuseDetectionService: Decides what reaction the caller should apply before running the credential operation.
evaluate(AbuseAttemptContext) - Method in class com.svenruppert.jsentinel.credential.abuse.InMemoryAbuseDetectionService
evaluate(PolicyContext) - Method in interface com.svenruppert.jsentinel.policy.api.Policy: Evaluates this policy against the given context.
evaluate(SessionMetadata) - Method in interface com.svenruppert.jsentinel.session.SessionPolicy: Pure-query lifetime check used by the Vaadin SessionLifetimeListener and the REST authentication / authorization filters.
evaluate(SessionMetadata) - Method in class com.svenruppert.jsentinel.session.TimeoutSessionPolicy: Pure-query lifetime check called by the Vaadin SessionLifetimeListener and by the REST filters.
evaluate(String, SecretValue, PasswordHistoryPolicy) - Method in class com.svenruppert.jsentinel.credential.history.PasswordHistoryService: Returns PasswordHistoryDecision.Reused when the supplied candidate verifies against any retained envelope under policy.
evaluate(String, PolicyContext) - Method in class com.svenruppert.jsentinel.policy.impl.InMemoryPolicyRegistry
evaluate(String, PolicyContext) - Method in interface com.svenruppert.jsentinel.policy.spi.PolicyRegistry: Evaluates the policy with the given name against the context.
evaluateAuthentication(NavigationJSentinelContext) - Method in class com.svenruppert.jsentinel.authorization.navigation.NavigationAccessDecisionService: Evaluates whether the current subject is authenticated for the given navigation context.
evaluateAuthorization(boolean, String, boolean) - Method in class com.svenruppert.jsentinel.authorization.navigation.NavigationAccessDecisionService: Evaluates whether the current subject has sufficient authorization (roles/permissions) for the requested route.
evaluatorClass() - Method in record class com.svenruppert.jsentinel.authorization.impl.AnnotationAccessEvaluatorPair: Returns the value of the evaluatorClass record component.
event() - Method in record class com.svenruppert.jsentinel.audit.AuditEnvelope: Returns the value of the event record component.
eventsInWindow() - Method in record class com.svenruppert.jsentinel.audit.RateLimitExceeded: Returns the value of the eventsInWindow record component.
eventsInWindow() - Method in record class com.svenruppert.jsentinel.ratelimiting.RateLimitDecision.Allowed: Returns the value of the eventsInWindow record component.
eventsInWindow() - Method in interface com.svenruppert.jsentinel.ratelimiting.RateLimitDecision
eventsInWindow() - Method in record class com.svenruppert.jsentinel.ratelimiting.RateLimitDecision.Throttled: Returns the value of the eventsInWindow record component.
ExperimentalJSentinelApi - Annotation Interface in com.svenruppert.jsentinel.authorization.api: Marks a type or method as part of the experimental security API.
EXPIRED - Enum constant in enum class com.svenruppert.jsentinel.credential.reset.ResetTokenStatus
EXPIRED - Enum constant in enum class com.svenruppert.jsentinel.session.SessionStatus: Session was terminated by an idle or absolute timeout.
expiresAt() - Method in record class com.svenruppert.jsentinel.accountlifecycle.EmailVerificationTokenRecord: Returns the value of the expiresAt record component.
expiresAt() - Method in record class com.svenruppert.jsentinel.accountlifecycle.PasswordResetTokenRecord: Returns the value of the expiresAt record component.
expiresAt() - Method in record class com.svenruppert.jsentinel.authentication.ApiKeyRecord: Returns the value of the expiresAt record component.
expiresAt() - Method in record class com.svenruppert.jsentinel.authentication.RefreshTokenRecord: Returns the value of the expiresAt record component.
expiresAt() - Method in record class com.svenruppert.jsentinel.authentication.RememberMeTokenRecord: Returns the value of the expiresAt record component.
expiresAt() - Method in record class com.svenruppert.jsentinel.credential.propagation.ApiKey: Returns the value of the expiresAt record component.
expiresAt() - Method in record class com.svenruppert.jsentinel.credential.propagation.BearerToken: Returns the value of the expiresAt record component.
expiresAt() - Method in record class com.svenruppert.jsentinel.credential.propagation.OidcAccessToken: Returns the value of the expiresAt record component.
expiresAt() - Method in record class com.svenruppert.jsentinel.credential.propagation.RefreshToken: Returns the value of the expiresAt record component.
expiresAt() - Method in interface com.svenruppert.jsentinel.credential.propagation.TokenCredential
expiresAt() - Method in record class com.svenruppert.jsentinel.credential.reset.ResetTokenRecord: Returns the value of the expiresAt record component.
extraSinks() - Method in class com.svenruppert.jsentinel.audit.CompositeAuditService: Returns an unmodifiable snapshot of the configured extra sinks.

F

failClosed() - Static method in record class com.svenruppert.jsentinel.credential.compromised.CompromisedPasswordPolicy: Fail-closed variant: any check failure rejects the change.
Failed() - Constructor for record class com.svenruppert.jsentinel.credential.reset.PasswordResetConsumeResult.Failed: Creates an instance of a Failed record class.
Failed(PublicFailureType, InternalAuditEventType) - Constructor for record class com.svenruppert.jsentinel.credential.password.CredentialVerificationResult.Failed: Creates an instance of a Failed record class.
failedAttempts() - Method in record class com.svenruppert.jsentinel.audit.BruteForceLimitReached: Returns the value of the failedAttempts record component.
failedAttempts() - Method in record class com.svenruppert.jsentinel.bruteforce.LoginAttemptDecision.LockedOut: Returns the value of the failedAttempts record component.
FAILURE - Enum constant in enum class com.svenruppert.jsentinel.credential.abuse.AttemptOutcome
failureCount(LoginAttemptKey) - Method in class com.svenruppert.jsentinel.bruteforce.InMemoryLoginAttemptStore
failureCount(LoginAttemptKey) - Method in interface com.svenruppert.jsentinel.bruteforce.LoginAttemptStore: Returns the number of failures currently held against key.
failureThreshold() - Method in record class com.svenruppert.jsentinel.bruteforce.LoginAttemptConfiguration: Returns the value of the failureThreshold record component.
FileBootstrapTokenOutput - Class in com.svenruppert.jsentinel.bootstrap: Tells the operator that the token has been written to a file.
FileBootstrapTokenOutput() - Constructor for class com.svenruppert.jsentinel.bootstrap.FileBootstrapTokenOutput
FileBootstrapTokenOutput(PrintStream) - Constructor for class com.svenruppert.jsentinel.bootstrap.FileBootstrapTokenOutput
FileBootstrapTokenStore - Class in com.svenruppert.jsentinel.bootstrap: File-backed token store for BootstrapMode.PERSISTENT_FILE.
FileBootstrapTokenStore(Path) - Constructor for class com.svenruppert.jsentinel.bootstrap.FileBootstrapTokenStore
find(TenantId) - Method in interface com.svenruppert.jsentinel.bootstrap.BootstrapStateStore: Returns the recorded bootstrap state for tenant.
find(TenantId) - Method in class com.svenruppert.jsentinel.bootstrap.InMemoryBootstrapStateStore
find(String) - Method in class com.svenruppert.jsentinel.policy.impl.InMemoryPolicyRegistry
find(String) - Method in class com.svenruppert.jsentinel.policy.impl.InMemoryResourceResolverRegistry
find(String) - Method in interface com.svenruppert.jsentinel.policy.spi.PolicyRegistry: Looks up a previously registered policy by name.
find(String) - Method in interface com.svenruppert.jsentinel.policy.spi.ResourceResolverRegistry: Looks up a resolver by resource type.
findActionAuthorizationService() - Static method in class com.svenruppert.jsentinel.authorization.api.JSentinelServiceResolver: Returns the registered ActionAuthorizationService, or empty if none is configured.
findAll() - Method in class com.svenruppert.jsentinel.session.InMemorySessionStore
findAll() - Method in interface com.svenruppert.jsentinel.session.SessionStore: Returns every record currently persisted, in insertion order.
findAuthenticationService() - Static method in class com.svenruppert.jsentinel.authorization.api.JSentinelServiceResolver: Returns the registered AuthenticationService, or empty if none is registered.
findAuthorizationService() - Static method in class com.svenruppert.jsentinel.authorization.api.JSentinelServiceResolver
findByHash(String) - Method in interface com.svenruppert.jsentinel.accountlifecycle.EmailVerificationTokenStore: Looks up a token record by its hash.
findByHash(String) - Method in class com.svenruppert.jsentinel.accountlifecycle.InMemoryEmailVerificationTokenStore
findByHash(String) - Method in class com.svenruppert.jsentinel.accountlifecycle.InMemoryPasswordResetTokenStore
findByHash(String) - Method in interface com.svenruppert.jsentinel.accountlifecycle.PasswordResetTokenStore: Looks up a token record by its hash.
findByHash(String) - Method in interface com.svenruppert.jsentinel.authentication.ApiKeyStore: Looks up an API-key record by its hash.
findByHash(String) - Method in class com.svenruppert.jsentinel.authentication.InMemoryApiKeyStore
findByHash(String) - Method in class com.svenruppert.jsentinel.authentication.InMemoryRefreshTokenStore
findByHash(String) - Method in class com.svenruppert.jsentinel.authentication.InMemoryRememberMeTokenStore
findByHash(String) - Method in interface com.svenruppert.jsentinel.authentication.RefreshTokenStore: Looks up a record by its hash.
findByHash(String) - Method in interface com.svenruppert.jsentinel.authentication.RememberMeTokenStore: Looks up a token record by its hash.
findById(SessionId) - Method in class com.svenruppert.jsentinel.session.InMemorySessionStore
findById(SessionId) - Method in interface com.svenruppert.jsentinel.session.SessionStore: Looks up the record for a session id.
findById(String) - Method in class com.svenruppert.jsentinel.authorization.api.operations.SecuredOperationRegistry
findBySelector(String) - Method in class com.svenruppert.jsentinel.credential.reset.InMemoryResetTokenStore
findBySelector(String) - Method in interface com.svenruppert.jsentinel.credential.reset.ResetTokenStore: Looks up a token by selector.
findBySubject(TenantId, SubjectId) - Method in class com.svenruppert.jsentinel.session.InMemorySessionStore
findBySubject(TenantId, SubjectId) - Method in interface com.svenruppert.jsentinel.session.SessionStore: Returns every record (in any SessionStatus) belonging to subjectId within tenant, in insertion order (oldest first).
findByUsername(String) - Method in interface com.svenruppert.jsentinel.credential.store.CredentialStore: Looks up the credential row for username.
findByUsername(String) - Method in class com.svenruppert.jsentinel.credential.store.InMemoryCredentialStore
findJSentinelAuditService() - Static method in class com.svenruppert.jsentinel.authorization.api.JSentinelServiceResolver: Returns the registered JSentinelAuditService, or empty if the SPI is unconfigured.
findJSentinelVersionStore() - Static method in class com.svenruppert.jsentinel.authorization.api.JSentinelServiceResolver: Returns the SPI-registered JSentinelVersionStore, or empty when no implementation is configured.
findLoginAttemptPolicy() - Static method in class com.svenruppert.jsentinel.authorization.api.JSentinelServiceResolver: Returns the registered LoginAttemptPolicy, or empty if none is configured.
findLogoutService() - Static method in class com.svenruppert.jsentinel.authorization.api.JSentinelServiceResolver: Returns the SPI-registered LogoutService, or empty when only the noop fallback is cached.
findOutboundTokenStrategy(String) - Static method in class com.svenruppert.jsentinel.authorization.api.JSentinelServiceResolver: V00.74 — look up an OutboundTokenStrategy by name.
findPasswordHashingService() - Static method in class com.svenruppert.jsentinel.authorization.api.JSentinelServiceResolver: Returns the SPI-registered PasswordHasher, or empty when the hasher is the default PBKDF2 fallback.
findPolicyRegistry() - Static method in class com.svenruppert.jsentinel.authorization.api.JSentinelServiceResolver: Returns the SPI-registered PolicyRegistry, or empty when only the default InMemoryPolicyRegistry fallback is in use.
findResourceResolverRegistry() - Static method in class com.svenruppert.jsentinel.authorization.api.JSentinelServiceResolver: Returns the SPI-registered ResourceResolverRegistry, or empty when only the default InMemoryResourceResolverRegistry fallback is in use.
findRoleHierarchy() - Static method in class com.svenruppert.jsentinel.authorization.api.JSentinelServiceResolver: Returns the SPI-registered RoleHierarchy, or empty when only the NoopRoleHierarchy fallback is in use.
findRoles(RoleAssignmentKey) - Method in class com.svenruppert.jsentinel.authorization.api.roles.InMemoryRoleAssignmentStore
findRoles(RoleAssignmentKey) - Method in interface com.svenruppert.jsentinel.authorization.api.roles.RoleAssignmentStore: Returns the roles currently assigned to key.
findSessionPolicy() - Static method in class com.svenruppert.jsentinel.authorization.api.JSentinelServiceResolver: Returns the registered SessionPolicy, or empty if none is configured.
findStepUpRouteName() - Static method in class com.svenruppert.jsentinel.authorization.api.JSentinelServiceResolver: Returns the explicitly configured step-up route name, or empty when only the JSentinelServiceResolver.DEFAULT_STEP_UP_ROUTE_NAME fallback is in use.
findSubjectIdResolver() - Static method in class com.svenruppert.jsentinel.authorization.api.JSentinelServiceResolver: Returns the SPI-registered SubjectIdResolver, or empty when no implementation is configured.
findSubjectStore() - Static method in class com.svenruppert.jsentinel.authorization.api.SubjectStores: Returns the registered SubjectStore, or empty if none is registered.
findTokenCredentialStore() - Static method in class com.svenruppert.jsentinel.authorization.api.JSentinelServiceResolver: V00.74 — optional lookup of the TokenCredentialStore.
FipsProfile - Record Class in com.svenruppert.jsentinel.credential.standards: Operator-declared FIPS operating profile.
FipsProfile(boolean, boolean, boolean, boolean, boolean) - Constructor for record class com.svenruppert.jsentinel.credential.standards.FipsProfile: Creates an instance of a FipsProfile record class.
Flow - Section in class com.svenruppert.jsentinel.credential.change.PasswordChangeService
forbidden(String) - Static method in interface com.svenruppert.jsentinel.authorization.api.AuthorizationDecision: Creates a forbidden decision.
Forbidden(String) - Constructor for record class com.svenruppert.jsentinel.authorization.api.AuthorizationDecision.Forbidden: Creates an instance of a Forbidden record class.
forbiddenTerms() - Method in record class com.svenruppert.jsentinel.credential.input.PasswordContext: Returns the value of the forbiddenTerms record component.
forBootstrap() - Method in class com.svenruppert.jsentinel.bruteforce.LoginAttemptConfigurationLoader: Loads configuration for the bootstrap-admin endpoint, falling back to LoginAttemptConfiguration.strictBootstrap() when no source supplies a value.
forceAllToStatus(Iterable, CredentialStatus, EmergencyPolicyOverride) - Method in class com.svenruppert.jsentinel.credential.emergency.MassCredentialStatusChange: Transitions each named credential to targetStatus.
ForcePasswordChange() - Constructor for record class com.svenruppert.jsentinel.credential.lifecycle.CredentialLifecycleDecision.ForcePasswordChange: Creates an instance of a ForcePasswordChange record class.
forLogin() - Method in class com.svenruppert.jsentinel.bruteforce.LoginAttemptConfigurationLoader: Loads configuration for the standard login endpoint, falling back to LoginAttemptConfiguration.defaults() when no source supplies a value.
FORMAT_VERSION_OUTDATED - Enum constant in enum class com.svenruppert.jsentinel.credential.password.RehashReason
formatVersion() - Method in record class com.svenruppert.jsentinel.credential.password.CredentialVerificationResult.Verified: Returns the value of the formatVersion record component.
formatVersion() - Method in record class com.svenruppert.jsentinel.credential.password.envelope.PasswordHashEnvelope: Returns the value of the formatVersion record component.
formatVersion() - Method in record class com.svenruppert.jsentinel.credential.password.PasswordHashResult: Returns the value of the formatVersion record component.
forSubject(String) - Static method in record class com.svenruppert.jsentinel.audit.AuditQuery: A query restricted to a single subject.
forward(String) - Static method in interface com.svenruppert.jsentinel.authorization.navigation.AccessDecision: Creates a forward decision.
from() - Method in record class com.svenruppert.jsentinel.audit.AuditQuery: Returns the value of the from record component.
from() - Method in exception class com.svenruppert.jsentinel.credential.lifecycle.InvalidStatusTransitionException
from(BootstrapStateService) - Static method in record class com.svenruppert.jsentinel.bootstrap.BootstrapStatus
fromAlgorithm() - Method in record class com.svenruppert.jsentinel.audit.CredentialRehashed: Returns the value of the fromAlgorithm record component.
fromEmail(String, String, TenantId, Set) - Static method in record class com.svenruppert.jsentinel.credential.input.PasswordContext: Convenience: build a context from username plus the literal "local@domain" email string.
fromServiceLoader() - Static method in class com.svenruppert.jsentinel.credential.password.provider.PasswordHashProviderRegistry: Builds a registry from every PasswordHashProvider discovered through ServiceLoader on the current thread's context class loader.
fromStatus() - Method in record class com.svenruppert.jsentinel.audit.CredentialStatusChanged: Returns the value of the fromStatus record component.
fromStatus() - Method in record class com.svenruppert.jsentinel.credential.metrics.CredentialMetricEvent.LifecycleTransition: Returns the value of the fromStatus record component.
fromWireValue(int) - Static method in enum class com.svenruppert.jsentinel.credential.password.envelope.PasswordHashFormatVersion: Resolves the enum constant that matches the supplied wire value.

G

generate() - Method in class com.svenruppert.jsentinel.bootstrap.BootstrapTokenGenerator
generate() - Method in class com.svenruppert.jsentinel.credential.token.TokenDigestService: Generates a fresh token from the supplied SecureRandom.
generateKey() - Static method in class com.svenruppert.jsentinel.credential.password.pepper.PepperApplicator: Generates a fresh 32-byte pepper key from SecureRandom.
GLOBAL - Enum constant in enum class com.svenruppert.jsentinel.credential.abuse.AbuseDimension: Process-wide counter — last-resort global ceiling.
granted() - Static method in interface com.svenruppert.jsentinel.authorization.api.AuthorizationDecision: Creates a granted decision.
granted() - Static method in interface com.svenruppert.jsentinel.authorization.navigation.AccessDecision: Creates a AccessDecision.Granted decision.
Granted() - Constructor for record class com.svenruppert.jsentinel.authorization.api.AuthorizationDecision.Granted: Creates an instance of a Granted record class.
Granted() - Constructor for record class com.svenruppert.jsentinel.authorization.navigation.AccessDecision.Granted: Creates an instance of a Granted record class.

H

hasAdministrator() - Method in class com.svenruppert.jsentinel.bootstrap.BootstrapStateService
hasAdministrator() - Method in class com.svenruppert.jsentinel.bootstrap.StoreBackedBootstrapStateService
hasAnyAdministrator() - Method in interface com.svenruppert.jsentinel.bootstrap.AdministratorAccountStore: Returns true when at least one active administrator account exists.
hasAnyRole(String...) - Static method in class com.svenruppert.jsentinel.policy.api.SubjectPredicates: Matches when an authenticated subject holds at least one of the given roles.
hash(char[]) - Method in interface com.svenruppert.jsentinel.authentication.PasswordHasher: Hashes the password and returns the implementation's wire format.
hash(char[]) - Method in class com.svenruppert.jsentinel.authentication.Pbkdf2PasswordHasher
hash(char[]) - Method in class com.svenruppert.jsentinel.credential.password.DefaultPasswordHashingService
hash(char[]) - Method in interface com.svenruppert.jsentinel.credential.password.PasswordHashingService: Produces a fresh hash for the given password under the active policy.
hash(char[], PasswordHashPolicy, Optional) - Method in class com.svenruppert.jsentinel.credential.password.pbkdf2.Pbkdf2PasswordHashProvider
hash(char[], PasswordHashPolicy, Optional) - Method in interface com.svenruppert.jsentinel.credential.password.provider.PasswordHashProvider: Derives a fresh hash for the supplied password under the active policy.
hash(SecretValue) - Method in interface com.svenruppert.jsentinel.credential.password.PasswordHashingService: SecretValue overload for PasswordHashingService.hash(char[]).
hashCode() - Method in record class com.svenruppert.jsentinel.accountlifecycle.EmailVerificationService.IssuedToken: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.accountlifecycle.EmailVerificationTokenRecord: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.accountlifecycle.JSentinelNotification: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.accountlifecycle.PasswordResetService.IssuedToken: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.accountlifecycle.PasswordResetTokenRecord: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.action.ActionPermission: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.audit.AccessDenied: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.audit.AccessGranted: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.audit.ActionDenied: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.audit.ApiKeyDenied: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.audit.ApiKeyUsed: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.audit.AuditEnvelope: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.audit.AuditQuery: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.audit.BootstrapAdminCreated: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.audit.BootstrapTokenRejected: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.audit.BruteForceLimitReached: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.audit.CredentialRehashed: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.audit.CredentialStatusChanged: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.audit.CredentialVerificationFailed: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.audit.CredentialVerificationSucceeded: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.audit.EmailVerificationRequested: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.audit.EmailVerified: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.audit.LoginFailed: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.audit.LoginSucceeded: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.audit.LogoutPerformed: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.audit.PasswordResetCompleted: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.audit.PasswordResetRequested: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.audit.PolicyEvaluated: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.audit.RateLimitExceeded: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.audit.RoleAssigned: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.audit.RoleRevoked: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.audit.SessionCreated: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.audit.SessionExpired: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.audit.SessionInvalidated: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.audit.SessionStale: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.audit.StepUpChallenged: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.audit.TokenRotated: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.audit.UserCreated: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.audit.UserDeleted: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.authentication.ApiKeyRecord: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.authentication.PasswordHash: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.authentication.RefreshTokenRecord: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.authentication.RememberMeTokenRecord: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.authentication.StoreBackedRememberMeService.IssuedToken: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.authentication.TokenService.TokenPair: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.authorization.api.AuthorizationDecision.Forbidden: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.authorization.api.AuthorizationDecision.Granted: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.authorization.api.AuthorizationDecision.StepUpRequired: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.authorization.api.AuthorizationDecision.Unauthenticated: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.authorization.api.JSentinelSubject: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.authorization.api.operations.SecuredOperationDescriptor: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.authorization.api.permissions.PermissionName: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.authorization.api.roles.RoleAssignmentKey: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.authorization.api.roles.RoleName: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.authorization.api.tenant.TenantId: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.authorization.impl.AnnotationAccessEvaluatorPair: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.authorization.navigation.AccessContext: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.authorization.navigation.AccessDecision.Granted: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.authorization.navigation.AccessDecision.Reroute: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.authorization.navigation.AccessDecision.RerouteToError: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.authorization.navigation.AccessDecision.RerouteWithParameter: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.authorization.navigation.AccessDecision.RerouteWithParameters: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.authorization.navigation.NavigationAccessDecision.AccessDenied: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.authorization.navigation.NavigationAccessDecision.Allowed: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.authorization.navigation.NavigationAccessDecision.AlreadyLoggedIn: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.authorization.navigation.NavigationAccessDecision.LoginRequired: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.authorization.navigation.NavigationJSentinelContext: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.bootstrap.BootstrapConfiguration: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.bootstrap.BootstrapState: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.bootstrap.BootstrapStatus: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.bootstrap.BootstrapToken: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.bootstrap.CreateInitialAdminCommand: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.bootstrap.InitialAdminCreationResult.AlreadyInitialized: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.bootstrap.InitialAdminCreationResult.Created: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.bootstrap.InitialAdminCreationResult.InternalError: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.bootstrap.InitialAdminCreationResult.InvalidBootstrapToken: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.bootstrap.InitialAdminCreationResult.InvalidUsername: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.bootstrap.InitialAdminCreationResult.PasswordPolicyViolation: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.bootstrap.NewAdministrator: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.bootstrap.PasswordPolicy.PasswordPolicyResult: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.bruteforce.LoginAttemptConfiguration: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.bruteforce.LoginAttemptContext: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.bruteforce.LoginAttemptDecision.Allowed: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.bruteforce.LoginAttemptDecision.LockedOut: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.bruteforce.LoginAttemptKey: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.credential.abuse.AbuseAttemptContext: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.credential.abuse.AbuseDecision.Allow: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.credential.abuse.AbuseDecision.Block: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.credential.abuse.AbuseDecision.Delay: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.credential.abuse.AbuseDecision.RequireAdditionalCheck: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.credential.abuse.AbuseLimitsPolicy.Limit: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.credential.abuse.AbusePatternMonitor.Config: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.credential.abuse.AbusePatternSignal: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.credential.change.PasswordChangeCommand: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.credential.change.PasswordChangeResult.Blocked: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.credential.change.PasswordChangeResult.Conflict: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.credential.change.PasswordChangeResult.CurrentPasswordRejected: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.credential.change.PasswordChangeResult.NewPasswordRejected: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.credential.change.PasswordChangeResult.NotFound: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.credential.change.PasswordChangeResult.Succeeded: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.credential.compromised.CompromisedPasswordPolicy: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.credential.compromised.CompromisedPasswordResult.CheckFailed: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.credential.compromised.CompromisedPasswordResult.Clean: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.credential.compromised.CompromisedPasswordResult.Pwned: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.credential.emergency.EmergencyPolicyOverride: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.credential.emergency.MassCredentialStatusChange.Report: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.credential.history.PasswordHistoryDecision.Allowed: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.credential.history.PasswordHistoryDecision.Reused: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.credential.history.PasswordHistoryEntry: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.credential.history.PasswordHistoryPolicy: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.credential.input.PasswordContext: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.credential.input.PasswordInputPolicy: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.credential.input.PasswordInputValidationResult.Accepted: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.credential.input.PasswordInputValidationResult.Rejected: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.credential.lifecycle.CredentialLifecycleDecision.BlockedPermanent: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.credential.lifecycle.CredentialLifecycleDecision.BlockedTemporary: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.credential.lifecycle.CredentialLifecycleDecision.ForcePasswordChange: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.credential.lifecycle.CredentialLifecycleDecision.Proceed: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.credential.lifecycle.CredentialLifecycleDecision.ResetInProgress: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.credential.metrics.CredentialMetricEvent.AbuseSignal: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.credential.metrics.CredentialMetricEvent.HashDuration: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.credential.metrics.CredentialMetricEvent.KdfLimiterRejection: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.credential.metrics.CredentialMetricEvent.LifecycleTransition: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.credential.metrics.CredentialMetricEvent.RehashRequested: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.credential.metrics.CredentialMetricEvent.VerifyDuration: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.credential.password.calibration.CalibrationProfile: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.credential.password.CredentialVerificationResult.Failed: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.credential.password.CredentialVerificationResult.Verified: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.credential.password.envelope.PasswordHashEnvelope: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.credential.password.envelope.PasswordHashRecord: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.credential.password.limiter.KdfResourceBudget: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.credential.password.PasswordHashResult: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.credential.password.pepper.PepperReference: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.credential.password.policy.ValidatedPasswordHash: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.credential.password.provider.ResourceEstimate: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.credential.password.ProviderVerificationResult.Matched: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.credential.password.ProviderVerificationResult.NotMatched: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.credential.password.ProviderVerificationResult.ProviderError: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.credential.password.RehashDecision.NotRequired: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.credential.password.RehashDecision.Required: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.credential.propagation.ApiKey: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.credential.propagation.BearerToken: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.credential.propagation.HeaderValue: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.credential.propagation.OidcAccessToken: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.credential.propagation.OutboundCall: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.credential.propagation.RefreshToken: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.credential.reset.PasswordResetConsumeResult.Failed: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.credential.reset.PasswordResetConsumeResult.Succeeded: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.credential.reset.ResetTokenCreationResult.Blocked: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.credential.reset.ResetTokenCreationResult.Created: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.credential.reset.ResetTokenCreationResult.UnknownUser: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.credential.reset.ResetTokenRecord: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.credential.reset.ResetTokenUpdateResult.NotFound: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.credential.reset.ResetTokenUpdateResult.Stale: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.credential.reset.ResetTokenUpdateResult.Updated: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.credential.standards.FipsProfile: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.credential.store.CredentialRecord: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.credential.store.CredentialUpdateResult.NotFound: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.credential.store.CredentialUpdateResult.Stale: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.credential.store.CredentialUpdateResult.Updated: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.credential.tenant.TenantCredentialContext: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.credential.token.SelectorVerifierToken: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.credential.token.TokenDigestRecord: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.credential.token.TokenVerificationResult.NotMatched: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.credential.token.TokenVerificationResult.SelectorMismatch: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.credential.token.TokenVerificationResult.Verified: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.logout.SubjectId: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.policy.api.PolicyContext: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.policy.api.PolicyDecision.Allowed: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.policy.api.PolicyDecision.Denied: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.policy.api.PolicyDecision.StepUpRequired: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.policy.api.ResourceAccessContext: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.policy.api.ResourceRef: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.ratelimiting.RateLimitDecision.Allowed: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.ratelimiting.RateLimitDecision.Throttled: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.ratelimiting.RateLimitKey: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.session.JSentinelVersion: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.session.JSentinelVersionEnforcer.EnforcementOutcome.Continue: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.session.JSentinelVersionEnforcer.EnforcementOutcome.SessionStale: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.session.JSentinelVersionKey: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.session.JSentinelVersionStatus.Current: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.session.JSentinelVersionStatus.Drifted: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.session.SessionContext: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.session.SessionDecision.Continue: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.session.SessionDecision.Invalidate: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.session.SessionDecision.RequireLogin: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.session.SessionId: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.session.SessionMetadata: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.session.SessionPolicyDecision.AbsoluteLifetimeExceeded: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.session.SessionPolicyDecision.Active: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.session.SessionPolicyDecision.IdleTimeout: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.session.SessionRecord: Returns a hash code value for this object.
hashCode() - Method in record class com.svenruppert.jsentinel.session.TimeoutSessionPolicy.Config: Returns a hash code value for this object.
HashDuration(String, String, int, long, boolean) - Constructor for record class com.svenruppert.jsentinel.credential.metrics.CredentialMetricEvent.HashDuration: Creates an instance of a HashDuration record class.
hashTo(char[]) - Method in interface com.svenruppert.jsentinel.authentication.PasswordHasher: Hashes the password and returns the parsed PasswordHash (algorithm + encoded bytes + parameters).
hasPermission(HasPermissions, PermissionName) - Static method in class com.svenruppert.jsentinel.authorization.api.PermissionGuard
hasPermission(String) - Static method in class com.svenruppert.jsentinel.policy.api.SubjectPredicates: Matches when an authenticated subject holds the given permission.
HasPermissions - Interface in com.svenruppert.jsentinel.authorization.api.permissions: Provides the set of permission names assigned to a subject.
hasResource(String) - Static method in class com.svenruppert.jsentinel.policy.api.ResourcePredicates: Matches when the PolicyContext carries a ResourceRef of the given resource type.
hasRole(HasRoles, RoleName) - Static method in class com.svenruppert.jsentinel.authorization.api.PermissionGuard
hasRole(String) - Static method in class com.svenruppert.jsentinel.policy.api.SubjectPredicates: Matches when an authenticated subject holds the given role.
HasRoles - Interface in com.svenruppert.jsentinel.authorization.api.roles: Provides the set of role names assigned to a subject.
hasSubject(Class) - Method in interface com.svenruppert.jsentinel.authorization.api.SubjectStore: Returns whether a subject is currently present in the store.
header() - Element in annotation interface com.svenruppert.jsentinel.annotations.PropagateToken: Override of the strategy's default header name.
HeaderValue - Record Class in com.svenruppert.jsentinel.credential.propagation: Result of an OutboundTokenStrategy — a single HTTP header the consumer's HTTP client applies before sending.
HeaderValue(String, String) - Constructor for record class com.svenruppert.jsentinel.credential.propagation.HeaderValue: Creates an instance of a HeaderValue record class.
hints() - Method in record class com.svenruppert.jsentinel.credential.propagation.OutboundCall: Returns the value of the hints record component.

I

id() - Method in record class com.svenruppert.jsentinel.audit.AuditEnvelope: Returns the value of the id record component.
id() - Method in record class com.svenruppert.jsentinel.authorization.api.operations.SecuredOperationDescriptor: Returns the value of the id record component.
idleTimeout() - Static method in interface com.svenruppert.jsentinel.session.SessionPolicyDecision: Convenience factory for the SessionPolicyDecision.IdleTimeout singleton.
idleTimeout() - Method in record class com.svenruppert.jsentinel.session.TimeoutSessionPolicy.Config: Returns the value of the idleTimeout record component.
IdleTimeout() - Constructor for record class com.svenruppert.jsentinel.session.SessionPolicyDecision.IdleTimeout: Creates an instance of a IdleTimeout record class.
impliedRoles(RoleName) - Method in class com.svenruppert.jsentinel.authorization.api.roles.NoopRoleHierarchy
impliedRoles(RoleName) - Method in interface com.svenruppert.jsentinel.authorization.api.roles.RoleHierarchy: Returns the closure of roles implied by the given held role.
impliedRoles(RoleName) - Method in class com.svenruppert.jsentinel.authorization.api.roles.StaticRoleHierarchy
impliesRole(RoleName, RoleName) - Method in interface com.svenruppert.jsentinel.authorization.api.roles.RoleHierarchy: Convenience: returns true when held implies required, either by identity or via the inheritance graph.
incidentId() - Method in record class com.svenruppert.jsentinel.credential.emergency.EmergencyPolicyOverride: Returns the value of the incidentId record component.
increment(JSentinelVersionKey) - Method in class com.svenruppert.jsentinel.session.InMemoryJSentinelVersionStore
increment(JSentinelVersionKey) - Method in interface com.svenruppert.jsentinel.session.JSentinelVersionStore: Atomically bumps the version for key by one and returns the new value.
inheritsFrom(RoleName, RoleName...) - Method in class com.svenruppert.jsentinel.authorization.api.roles.StaticRoleHierarchy.Builder: Registers one or more child roles that currentParent inherits from.
initial(String, String, CredentialStatus, Instant) - Static method in record class com.svenruppert.jsentinel.credential.store.CredentialRecord: Convenience: build a fresh record at version 1 with timestamps equal to now.
INITIAL - Static variable in record class com.svenruppert.jsentinel.session.JSentinelVersion: Initial version (zero) — the value used when a subject is first persisted.
InitialAdminBootstrapService - Class in com.svenruppert.jsentinel.bootstrap: Single-entry orchestrator that converts a CreateInitialAdminCommand into either a freshly created administrator or a non-leaking failure code.
InitialAdminBootstrapService(BootstrapStateService, BootstrapTokenStore, AdministratorAccountStore, PasswordHashingService, PasswordPolicy) - Constructor for class com.svenruppert.jsentinel.bootstrap.InitialAdminBootstrapService
InitialAdminBootstrapService(BootstrapStateService, BootstrapTokenStore, AdministratorAccountStore, PasswordHashingService, PasswordPolicy, Duration, Clock) - Constructor for class com.svenruppert.jsentinel.bootstrap.InitialAdminBootstrapService
InitialAdminCreationResult - Interface in com.svenruppert.jsentinel.bootstrap: Outcome of InitialAdminBootstrapService.createInitialAdmin(CreateInitialAdminCommand).
InitialAdminCreationResult.AlreadyInitialized - Record Class in com.svenruppert.jsentinel.bootstrap
InitialAdminCreationResult.Created - Record Class in com.svenruppert.jsentinel.bootstrap
InitialAdminCreationResult.InternalError - Record Class in com.svenruppert.jsentinel.bootstrap
InitialAdminCreationResult.InvalidBootstrapToken - Record Class in com.svenruppert.jsentinel.bootstrap
InitialAdminCreationResult.InvalidUsername - Record Class in com.svenruppert.jsentinel.bootstrap
InitialAdminCreationResult.PasswordPolicyViolation - Record Class in com.svenruppert.jsentinel.bootstrap
initializeIfRequired(BootstrapStateService, BootstrapTokenStore, BootstrapTokenGenerator, BootstrapTokenOutput, BootstrapConfiguration) - Static method in class com.svenruppert.jsentinel.bootstrap.BootstrapStartup
initialLockout() - Method in record class com.svenruppert.jsentinel.bruteforce.LoginAttemptConfiguration: Returns the value of the initialLockout record component.
InMemoryAbuseDetectionService - Class in com.svenruppert.jsentinel.credential.abuse: In-memory reference implementation of AbuseDetectionService.
InMemoryAbuseDetectionService(AbuseLimitsPolicy, JSentinelAuditService) - Constructor for class com.svenruppert.jsentinel.credential.abuse.InMemoryAbuseDetectionService
InMemoryApiKeyStore - Class in com.svenruppert.jsentinel.authentication: In-memory ApiKeyStore backed by a LinkedHashMap so InMemoryApiKeyStore.listBySubject(TenantId, SubjectId) preserves insertion order.
InMemoryApiKeyStore() - Constructor for class com.svenruppert.jsentinel.authentication.InMemoryApiKeyStore: Creates an empty store.
InMemoryAuditEventStore - Class in com.svenruppert.jsentinel.audit: In-memory AuditEventStore backed by a single tenant-scoped list.
InMemoryAuditEventStore() - Constructor for class com.svenruppert.jsentinel.audit.InMemoryAuditEventStore: Creates an empty store.
InMemoryBootstrapStateStore - Class in com.svenruppert.jsentinel.bootstrap: In-memory BootstrapStateStore backed by a ConcurrentHashMap keyed on TenantId.
InMemoryBootstrapStateStore() - Constructor for class com.svenruppert.jsentinel.bootstrap.InMemoryBootstrapStateStore: Creates an empty store.
InMemoryBootstrapTokenStore - Class in com.svenruppert.jsentinel.bootstrap: In-memory token store used by BootstrapMode.TRANSIENT_CONSOLE.
InMemoryBootstrapTokenStore() - Constructor for class com.svenruppert.jsentinel.bootstrap.InMemoryBootstrapTokenStore
InMemoryCredentialStore - Class in com.svenruppert.jsentinel.credential.store: In-memory CredentialStore backed by ConcurrentHashMap, suitable for tests, demos and small single-node deployments.
InMemoryCredentialStore() - Constructor for class com.svenruppert.jsentinel.credential.store.InMemoryCredentialStore
InMemoryEmailVerificationTokenStore - Class in com.svenruppert.jsentinel.accountlifecycle: In-memory EmailVerificationTokenStore backed by a ConcurrentHashMap keyed on the token hash.
InMemoryEmailVerificationTokenStore() - Constructor for class com.svenruppert.jsentinel.accountlifecycle.InMemoryEmailVerificationTokenStore: Creates an empty store.
InMemoryJSentinelVersionStore - Class in com.svenruppert.jsentinel.session: In-memory JSentinelVersionStore backed by a ConcurrentHashMap.
InMemoryJSentinelVersionStore() - Constructor for class com.svenruppert.jsentinel.session.InMemoryJSentinelVersionStore: Creates an empty store.
InMemoryLoginAttemptPolicy - Class in com.svenruppert.jsentinel.bruteforce: In-memory LoginAttemptPolicy suitable for single-node demos and small deployments.
InMemoryLoginAttemptPolicy() - Constructor for class com.svenruppert.jsentinel.bruteforce.InMemoryLoginAttemptPolicy: Defaults — suitable for single-node demos.
InMemoryLoginAttemptPolicy(LoginAttemptConfiguration, Clock, JSentinelAuditService) - Constructor for class com.svenruppert.jsentinel.bruteforce.InMemoryLoginAttemptPolicy
InMemoryLoginAttemptStore - Class in com.svenruppert.jsentinel.bruteforce: In-memory LoginAttemptStore backed by a single ConcurrentHashMap.
InMemoryLoginAttemptStore() - Constructor for class com.svenruppert.jsentinel.bruteforce.InMemoryLoginAttemptStore: Creates an empty store.
InMemoryPasswordHistoryStore - Class in com.svenruppert.jsentinel.credential.history
InMemoryPasswordHistoryStore() - Constructor for class com.svenruppert.jsentinel.credential.history.InMemoryPasswordHistoryStore
InMemoryPasswordResetTokenStore - Class in com.svenruppert.jsentinel.accountlifecycle: In-memory PasswordResetTokenStore backed by a ConcurrentHashMap keyed on the token hash.
InMemoryPasswordResetTokenStore() - Constructor for class com.svenruppert.jsentinel.accountlifecycle.InMemoryPasswordResetTokenStore: Creates an empty store.
InMemoryPepperService - Class in com.svenruppert.jsentinel.credential.password.pepper: In-process pepper key store for tests, demos and small single-node deployments.
InMemoryPepperService.Builder - Class in com.svenruppert.jsentinel.credential.password.pepper
InMemoryPolicyRegistry - Class in com.svenruppert.jsentinel.policy.impl: Thread-safe in-memory PolicyRegistry.
InMemoryPolicyRegistry() - Constructor for class com.svenruppert.jsentinel.policy.impl.InMemoryPolicyRegistry: Creates an empty registry.
InMemoryRateLimitPolicy - Class in com.svenruppert.jsentinel.ratelimiting: Default RateLimitPolicy backed by a RateLimitStore.
InMemoryRateLimitPolicy(RateLimitStore, JSentinelAuditService, int, Duration) - Constructor for class com.svenruppert.jsentinel.ratelimiting.InMemoryRateLimitPolicy
InMemoryRateLimitPolicy(RateLimitStore, JSentinelAuditService, int, Duration, Clock) - Constructor for class com.svenruppert.jsentinel.ratelimiting.InMemoryRateLimitPolicy: Full constructor.
InMemoryRateLimitStore - Class in com.svenruppert.jsentinel.ratelimiting: In-memory RateLimitStore backed by a per-key ConcurrentLinkedDeque of timestamps.
InMemoryRateLimitStore() - Constructor for class com.svenruppert.jsentinel.ratelimiting.InMemoryRateLimitStore: Creates an empty store.
InMemoryRefreshTokenStore - Class in com.svenruppert.jsentinel.authentication: In-memory RefreshTokenStore backed by a ConcurrentHashMap.
InMemoryRefreshTokenStore() - Constructor for class com.svenruppert.jsentinel.authentication.InMemoryRefreshTokenStore: Creates an empty store.
InMemoryRememberMeTokenStore - Class in com.svenruppert.jsentinel.authentication: In-memory RememberMeTokenStore backed by a ConcurrentHashMap keyed on the token hash.
InMemoryRememberMeTokenStore() - Constructor for class com.svenruppert.jsentinel.authentication.InMemoryRememberMeTokenStore: Creates an empty store.
InMemoryResetTokenStore - Class in com.svenruppert.jsentinel.credential.reset
InMemoryResetTokenStore() - Constructor for class com.svenruppert.jsentinel.credential.reset.InMemoryResetTokenStore
InMemoryResourceResolverRegistry - Class in com.svenruppert.jsentinel.policy.impl: Thread-safe in-memory ResourceResolverRegistry backed by a ConcurrentHashMap.
InMemoryResourceResolverRegistry() - Constructor for class com.svenruppert.jsentinel.policy.impl.InMemoryResourceResolverRegistry: Creates an empty registry.
InMemoryRoleAssignmentStore - Class in com.svenruppert.jsentinel.authorization.api.roles: In-memory RoleAssignmentStore backed by a ConcurrentHashMap.
InMemoryRoleAssignmentStore() - Constructor for class com.svenruppert.jsentinel.authorization.api.roles.InMemoryRoleAssignmentStore: Creates an empty store.
InMemorySessionStore - Class in com.svenruppert.jsentinel.session: In-memory SessionStore backed by a LinkedHashMap so InMemorySessionStore.findBySubject(TenantId, SubjectId) returns insertion-ordered results.
InMemorySessionStore() - Constructor for class com.svenruppert.jsentinel.session.InMemorySessionStore: Creates an empty store.
InMemorySubjectSessionRegistry - Class in com.svenruppert.jsentinel.logout: In-memory SubjectSessionRegistry suitable for single-node deployments and demos.
InMemorySubjectSessionRegistry() - Constructor for class com.svenruppert.jsentinel.logout.InMemorySubjectSessionRegistry
InMemoryTokenCredentialStore - Class in com.svenruppert.jsentinel.credential.propagation: Single-slot in-memory store.
InMemoryTokenCredentialStore() - Constructor for class com.svenruppert.jsentinel.credential.propagation.InMemoryTokenCredentialStore
innerHash() - Method in record class com.svenruppert.jsentinel.credential.password.envelope.PasswordHashEnvelope: Returns the value of the innerHash record component.
instance() - Static method in class com.svenruppert.jsentinel.session.NoopSessionPolicy: Returns the singleton, narrowed to the caller's subject type.
INSTANCE - Static variable in class com.svenruppert.jsentinel.audit.NoopJSentinelAuditService: Singleton instance.
INSTANCE - Static variable in class com.svenruppert.jsentinel.authorization.api.roles.NoopRoleHierarchy: Shared singleton instance — the hierarchy is stateless.
INSTANCE - Static variable in record class com.svenruppert.jsentinel.bruteforce.LoginAttemptDecision.Allowed: Shared singleton — there is only one shape of Allowed.
INSTANCE - Static variable in class com.svenruppert.jsentinel.bruteforce.NoopLoginAttemptPolicy: Singleton instance.
INSTANCE - Static variable in record class com.svenruppert.jsentinel.credential.abuse.AbuseDecision.Allow
INSTANCE - Static variable in record class com.svenruppert.jsentinel.credential.change.PasswordChangeResult.Conflict
INSTANCE - Static variable in record class com.svenruppert.jsentinel.credential.change.PasswordChangeResult.CurrentPasswordRejected
INSTANCE - Static variable in record class com.svenruppert.jsentinel.credential.change.PasswordChangeResult.NotFound
INSTANCE - Static variable in record class com.svenruppert.jsentinel.credential.compromised.CompromisedPasswordResult.Clean
INSTANCE - Static variable in class com.svenruppert.jsentinel.credential.compromised.NoOpCompromisedPasswordChecker
INSTANCE - Static variable in record class com.svenruppert.jsentinel.credential.history.PasswordHistoryDecision.Allowed
INSTANCE - Static variable in record class com.svenruppert.jsentinel.credential.history.PasswordHistoryDecision.Reused
INSTANCE - Static variable in record class com.svenruppert.jsentinel.credential.input.PasswordInputValidationResult.Accepted
INSTANCE - Static variable in record class com.svenruppert.jsentinel.credential.lifecycle.CredentialLifecycleDecision.BlockedPermanent
INSTANCE - Static variable in record class com.svenruppert.jsentinel.credential.lifecycle.CredentialLifecycleDecision.BlockedTemporary
INSTANCE - Static variable in record class com.svenruppert.jsentinel.credential.lifecycle.CredentialLifecycleDecision.ForcePasswordChange
INSTANCE - Static variable in record class com.svenruppert.jsentinel.credential.lifecycle.CredentialLifecycleDecision.Proceed
INSTANCE - Static variable in record class com.svenruppert.jsentinel.credential.lifecycle.CredentialLifecycleDecision.ResetInProgress
INSTANCE - Static variable in record class com.svenruppert.jsentinel.credential.metrics.CredentialMetricEvent.KdfLimiterRejection
INSTANCE - Static variable in class com.svenruppert.jsentinel.credential.metrics.NoOpCredentialJSentinelMetrics
INSTANCE - Static variable in class com.svenruppert.jsentinel.credential.password.limiter.NoLimitKdfExecutionLimiter
INSTANCE - Static variable in class com.svenruppert.jsentinel.credential.password.pepper.NoOpPepperService
INSTANCE - Static variable in record class com.svenruppert.jsentinel.credential.password.ProviderVerificationResult.Matched
INSTANCE - Static variable in record class com.svenruppert.jsentinel.credential.password.ProviderVerificationResult.NotMatched
INSTANCE - Static variable in record class com.svenruppert.jsentinel.credential.password.RehashDecision.NotRequired
INSTANCE - Static variable in class com.svenruppert.jsentinel.credential.propagation.PassThroughStrategy: Singleton instance — share across threads.
INSTANCE - Static variable in class com.svenruppert.jsentinel.credential.propagation.PropagateTokenAdvisor.Default: Shared singleton; advisor is stateless.
INSTANCE - Static variable in record class com.svenruppert.jsentinel.credential.reset.PasswordResetConsumeResult.Failed
INSTANCE - Static variable in record class com.svenruppert.jsentinel.credential.reset.PasswordResetConsumeResult.Succeeded
INSTANCE - Static variable in record class com.svenruppert.jsentinel.credential.reset.ResetTokenCreationResult.Blocked
INSTANCE - Static variable in record class com.svenruppert.jsentinel.credential.reset.ResetTokenCreationResult.UnknownUser
INSTANCE - Static variable in record class com.svenruppert.jsentinel.credential.reset.ResetTokenUpdateResult.NotFound
INSTANCE - Static variable in record class com.svenruppert.jsentinel.credential.reset.ResetTokenUpdateResult.Stale
INSTANCE - Static variable in record class com.svenruppert.jsentinel.credential.store.CredentialUpdateResult.NotFound
INSTANCE - Static variable in record class com.svenruppert.jsentinel.credential.store.CredentialUpdateResult.Stale
INSTANCE - Static variable in record class com.svenruppert.jsentinel.credential.token.TokenVerificationResult.NotMatched
INSTANCE - Static variable in record class com.svenruppert.jsentinel.credential.token.TokenVerificationResult.SelectorMismatch
INSTANCE - Static variable in record class com.svenruppert.jsentinel.credential.token.TokenVerificationResult.Verified
INSTANCE - Static variable in class com.svenruppert.jsentinel.logout.NoopLogoutService: Singleton instance.
INSTANCE - Static variable in record class com.svenruppert.jsentinel.session.SessionDecision.Continue: Shared singleton — there is only one shape of Continue.
INSTANCE - Static variable in record class com.svenruppert.jsentinel.session.SessionPolicyDecision.AbsoluteLifetimeExceeded: Shared singleton.
INSTANCE - Static variable in record class com.svenruppert.jsentinel.session.SessionPolicyDecision.Active: Shared singleton — there is only one shape of Active.
INSTANCE - Static variable in record class com.svenruppert.jsentinel.session.SessionPolicyDecision.IdleTimeout: Shared singleton.
internalAuditEventType() - Method in record class com.svenruppert.jsentinel.audit.CredentialVerificationFailed: Returns the value of the internalAuditEventType record component.
internalAuditEventType() - Method in record class com.svenruppert.jsentinel.credential.password.CredentialVerificationResult.Failed: Returns the value of the internalAuditEventType record component.
internalAuditEventType() - Method in record class com.svenruppert.jsentinel.credential.password.ProviderVerificationResult.ProviderError: Returns the value of the internalAuditEventType record component.
InternalAuditEventType - Enum Class in com.svenruppert.jsentinel.credential: Differentiated, internal-only classification of credential verification outcomes.
InternalError(String) - Constructor for record class com.svenruppert.jsentinel.bootstrap.InitialAdminCreationResult.InternalError: Creates an instance of a InternalError record class.
Interoperability - Section in class com.svenruppert.jsentinel.credential.secret.SecretValue
intParameter(String, int) - Method in record class com.svenruppert.jsentinel.authentication.PasswordHash: Convenience reader for a numeric parameter — returns the parsed value or defaultValue if the key is missing or unparseable.
INVALID_CREDENTIALS - Enum constant in enum class com.svenruppert.jsentinel.credential.PublicFailureType
invalidate() - Method in interface com.svenruppert.jsentinel.bootstrap.BootstrapTokenStore
invalidate() - Method in class com.svenruppert.jsentinel.bootstrap.FileBootstrapTokenStore
invalidate() - Method in class com.svenruppert.jsentinel.bootstrap.InMemoryBootstrapTokenStore
Invalidate(String, String) - Constructor for record class com.svenruppert.jsentinel.session.SessionDecision.Invalidate: Creates an instance of a Invalidate record class.
INVALIDATE_OTHER_SESSIONS - Enum constant in enum class com.svenruppert.jsentinel.credential.change.SessionHandlingDecision: Keep the current session; invalidate every other active session.
InvalidBootstrapToken() - Constructor for record class com.svenruppert.jsentinel.bootstrap.InitialAdminCreationResult.InvalidBootstrapToken: Creates an instance of a InvalidBootstrapToken record class.
InvalidStatusTransitionException - Exception Class in com.svenruppert.jsentinel.credential.lifecycle: Thrown by CredentialLifecycleService.transition(String, CredentialStatus, CredentialStatus, String) when the requested transition is not part of the configured state machine.
InvalidStatusTransitionException(CredentialStatus, CredentialStatus) - Constructor for exception class com.svenruppert.jsentinel.credential.lifecycle.InvalidStatusTransitionException
InvalidUsername(String) - Constructor for record class com.svenruppert.jsentinel.bootstrap.InitialAdminCreationResult.InvalidUsername: Creates an instance of a InvalidUsername record class.
ip() - Method in record class com.svenruppert.jsentinel.bruteforce.LoginAttemptKey: Returns the value of the ip record component.
ipAllowList(String, String, String...) - Static method in class com.svenruppert.jsentinel.policy.api.JSentinelPolicies: IP allow-list pattern: subject's request must come from an address in allowedCidrs (CIDR notation, e.g.
isActive() - Method in enum class com.svenruppert.jsentinel.session.SessionStatus: Returns true only for SessionStatus.ACTIVE.
isActive(Instant) - Method in record class com.svenruppert.jsentinel.authentication.ApiKeyRecord: Whether the key is admissible at now — neither revoked nor expired.
isActive(Instant) - Method in record class com.svenruppert.jsentinel.authentication.RefreshTokenRecord: Whether the token is admissible — not revoked, not replaced, not expired.
isAlgorithmAcceptable(String) - Method in class com.svenruppert.jsentinel.credential.password.policy.DefaultPasswordHashPolicy
isAlgorithmAcceptable(String) - Method in interface com.svenruppert.jsentinel.credential.password.policy.PasswordHashPolicy: Returns whether the given algorithm is acceptable for verification under this policy.
isAllowed(CredentialStatus, CredentialStatus) - Method in class com.svenruppert.jsentinel.credential.lifecycle.CredentialLifecycleService: Returns whether a transition is part of the configured state machine.
isAllowed(U, ActionPermission) - Method in interface com.svenruppert.jsentinel.action.ActionAuthorizationService
isAllowed(U, ActionPermission) - Method in class com.svenruppert.jsentinel.action.StaticActionAuthorizationService
isAnonymous() - Static method in class com.svenruppert.jsentinel.policy.api.SubjectPredicates: Matches when no authenticated subject is bound to the context.
isAuthenticatedOnly() - Method in record class com.svenruppert.jsentinel.authorization.api.operations.SecuredOperationDescriptor
isConsumed() - Method in record class com.svenruppert.jsentinel.accountlifecycle.EmailVerificationTokenRecord: Returns whether the token has been consumed.
isConsumed() - Method in record class com.svenruppert.jsentinel.accountlifecycle.PasswordResetTokenRecord: Returns whether the token has been consumed.
isCurrent() - Method in interface com.svenruppert.jsentinel.session.JSentinelVersionStatus
isDestroyed() - Method in class com.svenruppert.jsentinel.credential.secret.SecretValue: Whether SecretValue.destroy() has been called.
isDrifted() - Method in interface com.svenruppert.jsentinel.session.JSentinelVersionStatus
isEmpty() - Method in class com.svenruppert.jsentinel.authorization.api.operations.SecuredOperationRegistry
isExpired(Instant) - Method in record class com.svenruppert.jsentinel.accountlifecycle.EmailVerificationTokenRecord: Returns true when the token is past its expiry at the supplied instant.
isExpired(Instant) - Method in record class com.svenruppert.jsentinel.accountlifecycle.PasswordResetTokenRecord: Returns true when the token is past its expiry at the supplied instant.
isExpired(Instant) - Method in record class com.svenruppert.jsentinel.authentication.ApiKeyRecord: Whether the key is expired at now.
isExpired(Instant) - Method in record class com.svenruppert.jsentinel.authentication.RefreshTokenRecord: Whether the token is past expiry at now.
isExpired(Instant) - Method in record class com.svenruppert.jsentinel.authentication.RememberMeTokenRecord: Returns true when the token is past its expiry at the supplied instant.
isExpired(Instant) - Method in record class com.svenruppert.jsentinel.credential.reset.ResetTokenRecord
isExpired(Instant, Duration) - Method in record class com.svenruppert.jsentinel.bootstrap.BootstrapToken
isLoginTarget() - Method in record class com.svenruppert.jsentinel.authorization.navigation.NavigationJSentinelContext: Returns the value of the isLoginTarget record component.
isProviderAcceptable(String) - Method in class com.svenruppert.jsentinel.credential.password.policy.DefaultPasswordHashPolicy
isProviderAcceptable(String) - Method in interface com.svenruppert.jsentinel.credential.password.policy.PasswordHashPolicy: Returns whether the given provider identifier is acceptable for verification under this policy.
isReplaced() - Method in record class com.svenruppert.jsentinel.authentication.RefreshTokenRecord: Whether RefreshTokenRecord.replacedByHash() is present.
isRevoked() - Method in record class com.svenruppert.jsentinel.authentication.ApiKeyRecord: Whether ApiKeyRecord.revokedAt() is present.
isRevoked() - Method in record class com.svenruppert.jsentinel.authentication.RefreshTokenRecord: Whether RefreshTokenRecord.revokedAt() is present.
isStale() - Method in interface com.svenruppert.jsentinel.session.JSentinelVersionEnforcer.EnforcementOutcome
issue(SubjectId) - Method in class com.svenruppert.jsentinel.authentication.TokenService: Issues a fresh access + refresh pair.
issue(SubjectId, Duration) - Method in class com.svenruppert.jsentinel.authentication.StoreBackedRememberMeService: Issues a new token for subjectId with the given TTL.
issue(String, Duration) - Method in class com.svenruppert.jsentinel.credential.reset.PasswordResetService: Issues a fresh reset token.
Issue - Section in class com.svenruppert.jsentinel.credential.reset.PasswordResetService
ISSUED - Enum constant in enum class com.svenruppert.jsentinel.credential.reset.ResetTokenStatus
issuedAt() - Method in record class com.svenruppert.jsentinel.credential.reset.ResetTokenRecord: Returns the value of the issuedAt record component.
IssuedToken(String, EmailVerificationTokenRecord) - Constructor for record class com.svenruppert.jsentinel.accountlifecycle.EmailVerificationService.IssuedToken: Validates the components.
IssuedToken(String, PasswordResetTokenRecord) - Constructor for record class com.svenruppert.jsentinel.accountlifecycle.PasswordResetService.IssuedToken: Validates the components.
IssuedToken(String, RememberMeTokenRecord) - Constructor for record class com.svenruppert.jsentinel.authentication.StoreBackedRememberMeService.IssuedToken: Validates the components.
issuerHash() - Method in record class com.svenruppert.jsentinel.credential.propagation.ApiKey: Returns the value of the issuerHash record component.
issuerHash() - Method in record class com.svenruppert.jsentinel.credential.propagation.BearerToken: Returns the value of the issuerHash record component.
issuerHash() - Method in record class com.svenruppert.jsentinel.credential.propagation.OidcAccessToken: Returns the value of the issuerHash record component.
issuerHash() - Method in record class com.svenruppert.jsentinel.credential.propagation.RefreshToken: Returns the value of the issuerHash record component.
issuerHash() - Method in interface com.svenruppert.jsentinel.credential.propagation.TokenCredential
ITERATIONS - Static variable in class com.svenruppert.jsentinel.credential.password.pbkdf2.Pbkdf2ParameterNames: Iteration count, decimal integer.

J

JSentinelAnnotation - Annotation Interface in com.svenruppert.jsentinel.authorization.annotations: This annotation is to be placed on other annotations, marking them as restriction-annotations and assigning evaluator classes to them.
JSentinelAnnotationScanner - Class in com.svenruppert.jsentinel.authorization.impl: Scans annotated elements for JSentinelAnnotation-meta-annotated restriction annotations and resolves the corresponding evaluator class.
JSentinelAnnotationScanner() - Constructor for class com.svenruppert.jsentinel.authorization.impl.JSentinelAnnotationScanner: Creates a new scanner with an empty cache.
JSentinelAuditService - Interface in com.svenruppert.jsentinel.audit: Read/write facade for security audit events.
JSentinelEnforcer - Class in com.svenruppert.jsentinel.authorization.api: Central enforcement entry point shared by the SecuredProxy dynamic-proxy path in security-standalone and the wrapper classes generated by the security-processor annotation processor.
JSentinelNotification - Record Class in com.svenruppert.jsentinel.accountlifecycle: Adapter-neutral notification payload handed to a JSentinelNotificationSender.
JSentinelNotification(JSentinelNotification.Kind, SubjectId, TenantId, Instant, Map) - Constructor for record class com.svenruppert.jsentinel.accountlifecycle.JSentinelNotification: Validates the record components and freezes the attribute map.
JSentinelNotification.Kind - Enum Class in com.svenruppert.jsentinel.accountlifecycle: Notification category — one per lifecycle hook.
JSentinelNotificationSender - Interface in com.svenruppert.jsentinel.accountlifecycle: Account-lifecycle notification dispatcher.
JSentinelPolicies - Class in com.svenruppert.jsentinel.policy.api: Pre-built policies for the most common access-control patterns.
JSentinelServiceResolver - Class in com.svenruppert.jsentinel.authorization.api: Central resolver for security-related SPI services.
JSentinelSubject - Record Class in com.svenruppert.jsentinel.authorization.api: Reduced security identity used for access decisions.
JSentinelSubject(String, String, Set, Set) - Constructor for record class com.svenruppert.jsentinel.authorization.api.JSentinelSubject: Creates a security subject with defensive copies.
JSentinelVersion - Record Class in com.svenruppert.jsentinel.session: Monotonically-increasing version of a subject's security-relevant state (roles, permissions, password, …).
JSentinelVersion(long) - Constructor for record class com.svenruppert.jsentinel.session.JSentinelVersion: Validates the record component.
JSentinelVersionCheck - Class in com.svenruppert.jsentinel.session: Adapter-neutral security-version drift detector.
JSentinelVersionCheck(JSentinelVersionStore) - Constructor for class com.svenruppert.jsentinel.session.JSentinelVersionCheck
JSentinelVersionEnforcer - Class in com.svenruppert.jsentinel.session: Adapter-neutral enforcement layer on top of JSentinelVersionCheck.
JSentinelVersionEnforcer(JSentinelVersionCheck, JSentinelAuditService, Clock) - Constructor for class com.svenruppert.jsentinel.session.JSentinelVersionEnforcer: Full constructor.
JSentinelVersionEnforcer(JSentinelVersionStore, JSentinelAuditService) - Constructor for class com.svenruppert.jsentinel.session.JSentinelVersionEnforcer
JSentinelVersionEnforcer.EnforcementOutcome - Interface in com.svenruppert.jsentinel.session: Sealed outcome of an JSentinelVersionEnforcer.enforce(SubjectId, TenantId, JSentinelVersion, String, String) call.
JSentinelVersionEnforcer.EnforcementOutcome.Continue - Record Class in com.svenruppert.jsentinel.session: The request continues — versions match.
JSentinelVersionEnforcer.EnforcementOutcome.SessionStale - Record Class in com.svenruppert.jsentinel.session: The request must be refused — session security version no longer matches.
JSentinelVersionKey - Record Class in com.svenruppert.jsentinel.session: Composite key under which JSentinelVersionStore tracks the current JSentinelVersion of a subject.
JSentinelVersionKey(TenantId, SubjectId) - Constructor for record class com.svenruppert.jsentinel.session.JSentinelVersionKey: Validates the record components and normalises a null tenant to TenantId.DEFAULT.
JSentinelVersionStatus - Interface in com.svenruppert.jsentinel.session: Result of a JSentinelVersionCheck.check(JSentinelVersionKey, JSentinelVersion) call against a session snapshot.
JSentinelVersionStatus.Current - Record Class in com.svenruppert.jsentinel.session: Session is still current — its snapshot matches the subject's stored version.
JSentinelVersionStatus.Drifted - Record Class in com.svenruppert.jsentinel.session: Session has drifted — its snapshot differs from the subject's stored version.
JSentinelVersionStore - Interface in com.svenruppert.jsentinel.session: Persistent counter store for JSentinelVersion per JSentinelVersionKey.
JVM memory honesty - Section in class com.svenruppert.jsentinel.credential.input.PasswordNormalizer
JVM memory honesty - Section in class com.svenruppert.jsentinel.credential.secret.SecretValue

K

KdfExecutionLimiter - Interface in com.svenruppert.jsentinel.credential.password.limiter: Bounds the number of KDF invocations that may run concurrently.
KdfExecutionLimiter.Lease - Interface in com.svenruppert.jsentinel.credential.password.limiter: Permit handle.
KdfLimiterRejection() - Constructor for record class com.svenruppert.jsentinel.credential.metrics.CredentialMetricEvent.KdfLimiterRejection: Creates an instance of a KdfLimiterRejection record class.
KdfLimitExceededException() - Constructor for exception class com.svenruppert.jsentinel.credential.password.DefaultPasswordHashingService.KdfLimitExceededException
KdfResourceBudget - Record Class in com.svenruppert.jsentinel.credential.password.limiter: Resource budget for the KdfExecutionLimiter.
KdfResourceBudget(int, Duration) - Constructor for record class com.svenruppert.jsentinel.credential.password.limiter.KdfResourceBudget: Creates an instance of a KdfResourceBudget record class.
KEEP_SESSIONS - Enum constant in enum class com.svenruppert.jsentinel.credential.change.SessionHandlingDecision: Keep every session.
key() - Method in record class com.svenruppert.jsentinel.credential.password.pepper.PepperReference: Returns the value of the key record component.
KEY_LENGTH - Static variable in class com.svenruppert.jsentinel.credential.password.pbkdf2.Pbkdf2ParameterNames: Derived-key length in bytes, decimal integer.
keyHash() - Method in record class com.svenruppert.jsentinel.audit.ApiKeyDenied: Returns the value of the keyHash record component.
keyHash() - Method in record class com.svenruppert.jsentinel.audit.ApiKeyUsed: Returns the value of the keyHash record component.
keyHash() - Method in record class com.svenruppert.jsentinel.authentication.ApiKeyRecord: Returns the value of the keyHash record component.
keyId() - Method in record class com.svenruppert.jsentinel.credential.password.pepper.PepperReference: Returns the value of the keyId record component.
keyName() - Method in record class com.svenruppert.jsentinel.audit.ApiKeyUsed: Returns the value of the keyName record component.
Keys - Section in class com.svenruppert.jsentinel.bootstrap.BootstrapConfigurationLoader
Keys - Section in class com.svenruppert.jsentinel.bruteforce.LoginAttemptConfigurationLoader
kind() - Method in record class com.svenruppert.jsentinel.accountlifecycle.JSentinelNotification: Returns the value of the kind record component.
knownAlgorithms() - Method in class com.svenruppert.jsentinel.credential.password.policy.PasswordHashParameterValidatorRegistry: Returns the algorithm identifiers known to this registry.
knownKeyCount() - Method in class com.svenruppert.jsentinel.credential.password.pepper.InMemoryPepperService: Convenience for tests: returns the number of known key ids.
knownProviderIds() - Method in class com.svenruppert.jsentinel.credential.password.provider.PasswordHashProviderRegistry: Returns the provider identifiers known to this registry, in registration order.

L

label() - Method in record class com.svenruppert.jsentinel.authorization.api.operations.SecuredOperationDescriptor: Returns the value of the label record component.
lastActivity() - Method in record class com.svenruppert.jsentinel.session.SessionContext: Returns the value of the lastActivity record component.
lastActivityAt() - Method in record class com.svenruppert.jsentinel.session.SessionMetadata: Returns the value of the lastActivityAt record component.
lastActivityAt() - Method in record class com.svenruppert.jsentinel.session.SessionRecord: Returns the value of the lastActivityAt record component.
lastFailureAt(LoginAttemptKey) - Method in class com.svenruppert.jsentinel.bruteforce.InMemoryLoginAttemptStore
lastFailureAt(LoginAttemptKey) - Method in interface com.svenruppert.jsentinel.bruteforce.LoginAttemptStore: Returns the timestamp of the most recent failure on key, if any.
lastUsedAt() - Method in record class com.svenruppert.jsentinel.authentication.ApiKeyRecord: Returns the value of the lastUsedAt record component.
length() - Method in class com.svenruppert.jsentinel.credential.secret.SecretValue: Number of characters held.
Lifecycle - Section in class com.svenruppert.jsentinel.credential.secret.SecretValue
LifecycleTransition(CredentialStatus, CredentialStatus) - Constructor for record class com.svenruppert.jsentinel.credential.metrics.CredentialMetricEvent.LifecycleTransition: Creates an instance of a LifecycleTransition record class.
limit() - Method in record class com.svenruppert.jsentinel.audit.AuditQuery: Returns the value of the limit record component.
limit() - Method in record class com.svenruppert.jsentinel.audit.RateLimitExceeded: Returns the value of the limit record component.
limit() - Method in class com.svenruppert.jsentinel.ratelimiting.InMemoryRateLimitPolicy
limit() - Method in record class com.svenruppert.jsentinel.ratelimiting.RateLimitDecision.Allowed: Returns the value of the limit record component.
limit() - Method in interface com.svenruppert.jsentinel.ratelimiting.RateLimitDecision
limit() - Method in record class com.svenruppert.jsentinel.ratelimiting.RateLimitDecision.Throttled: Returns the value of the limit record component.
limit(AbuseAttemptType, AbuseDimension) - Method in class com.svenruppert.jsentinel.credential.abuse.AbuseLimitsPolicy
Limit(Duration, int, int, int, Duration, Duration) - Constructor for record class com.svenruppert.jsentinel.credential.abuse.AbuseLimitsPolicy.Limit: Creates an instance of a Limit record class.
listBySubject(TenantId, SubjectId) - Method in interface com.svenruppert.jsentinel.authentication.ApiKeyStore: Returns every record (active, revoked, or expired) belonging to subjectId within tenant, in insertion order (oldest first).
listBySubject(TenantId, SubjectId) - Method in class com.svenruppert.jsentinel.authentication.InMemoryApiKeyStore
load() - Method in interface com.svenruppert.jsentinel.bootstrap.BootstrapTokenStore
load() - Method in class com.svenruppert.jsentinel.bootstrap.FileBootstrapTokenStore
load() - Method in class com.svenruppert.jsentinel.bootstrap.InMemoryBootstrapTokenStore
load(BootstrapMode, Path, Duration) - Method in class com.svenruppert.jsentinel.bootstrap.BootstrapConfigurationLoader: Builds a BootstrapConfiguration from the configured sources.
load(Path) - Method in class com.svenruppert.jsentinel.credential.password.calibration.CalibrationProfileStore: Deserialises a profile from the given path.
loadSubject(T) - Method in interface com.svenruppert.jsentinel.authentication.AuthenticationService: Loads the subject for the given (already validated) credentials.
LocalBlocklistCompromisedPasswordChecker - Class in com.svenruppert.jsentinel.credential.compromised: Offline CompromisedPasswordChecker backed by an operator- supplied blocklist.
LocalBlocklistCompromisedPasswordChecker(Collection) - Constructor for class com.svenruppert.jsentinel.credential.compromised.LocalBlocklistCompromisedPasswordChecker
LOCKED - Enum constant in enum class com.svenruppert.jsentinel.credential.store.CredentialStatus
lockedOut(Duration, int) - Static method in interface com.svenruppert.jsentinel.bruteforce.LoginAttemptDecision: Convenience for LoginAttemptDecision.LockedOut.
LockedOut(Duration, int) - Constructor for record class com.svenruppert.jsentinel.bruteforce.LoginAttemptDecision.LockedOut: Creates an instance of a LockedOut record class.
lockoutDuration() - Method in record class com.svenruppert.jsentinel.audit.BruteForceLimitReached: Returns the value of the lockoutDuration record component.
LoggingAuditSink - Class in com.svenruppert.jsentinel.audit: AuditSink that writes a single Logger line per event at INFO level.
LoggingAuditSink() - Constructor for class com.svenruppert.jsentinel.audit.LoggingAuditSink
LoggingAuditSink(Logger) - Constructor for class com.svenruppert.jsentinel.audit.LoggingAuditSink
LoggingNotificationSender - Class in com.svenruppert.jsentinel.accountlifecycle: Default JSentinelNotificationSender that writes a single INFO line per notification — useful for demos and tests that need lifecycle flows to complete without a real mail provider.
LoggingNotificationSender() - Constructor for class com.svenruppert.jsentinel.accountlifecycle.LoggingNotificationSender: Uses the default accountlifecycle logger.
LoggingNotificationSender(Logger) - Constructor for class com.svenruppert.jsentinel.accountlifecycle.LoggingNotificationSender
LOGIN - Enum constant in enum class com.svenruppert.jsentinel.credential.abuse.AbuseAttemptType
LOGIN_INITIAL_LOCKOUT_ENV - Static variable in class com.svenruppert.jsentinel.bruteforce.LoginAttemptConfigurationLoader
LOGIN_INITIAL_LOCKOUT_PROPERTY - Static variable in class com.svenruppert.jsentinel.bruteforce.LoginAttemptConfigurationLoader
LOGIN_MAX_LOCKOUT_ENV - Static variable in class com.svenruppert.jsentinel.bruteforce.LoginAttemptConfigurationLoader
LOGIN_MAX_LOCKOUT_PROPERTY - Static variable in class com.svenruppert.jsentinel.bruteforce.LoginAttemptConfigurationLoader
LOGIN_THRESHOLD_ENV - Static variable in class com.svenruppert.jsentinel.bruteforce.LoginAttemptConfigurationLoader
LOGIN_THRESHOLD_PROPERTY - Static variable in class com.svenruppert.jsentinel.bruteforce.LoginAttemptConfigurationLoader
LOGIN_WINDOW_ENV - Static variable in class com.svenruppert.jsentinel.bruteforce.LoginAttemptConfigurationLoader
LOGIN_WINDOW_PROPERTY - Static variable in class com.svenruppert.jsentinel.bruteforce.LoginAttemptConfigurationLoader
LoginAttemptConfiguration - Record Class in com.svenruppert.jsentinel.bruteforce: Tunable thresholds for InMemoryLoginAttemptPolicy and any other LoginAttemptPolicy that wants the same vocabulary.
LoginAttemptConfiguration(int, Duration, Duration, Duration) - Constructor for record class com.svenruppert.jsentinel.bruteforce.LoginAttemptConfiguration: Creates an instance of a LoginAttemptConfiguration record class.
LoginAttemptConfigurationLoader - Class in com.svenruppert.jsentinel.bruteforce: Loads LoginAttemptConfiguration from system properties and environment variables, with a caller-supplied default.
LoginAttemptConfigurationLoader() - Constructor for class com.svenruppert.jsentinel.bruteforce.LoginAttemptConfigurationLoader: Default loader reading from System.getProperty(String) and System.getenv(String).
LoginAttemptConfigurationLoader(Function, Function) - Constructor for class com.svenruppert.jsentinel.bruteforce.LoginAttemptConfigurationLoader: Test seam: inject custom sources.
LoginAttemptContext - Record Class in com.svenruppert.jsentinel.bruteforce: Adapter-neutral input to a LoginAttemptPolicy decision.
LoginAttemptContext(String, String, String, Instant) - Constructor for record class com.svenruppert.jsentinel.bruteforce.LoginAttemptContext: Creates an instance of a LoginAttemptContext record class.
LoginAttemptDecision - Interface in com.svenruppert.jsentinel.bruteforce: Outcome of LoginAttemptPolicy.beforeAttempt(LoginAttemptContext).
LoginAttemptDecision.Allowed - Record Class in com.svenruppert.jsentinel.bruteforce: The attempt may proceed.
LoginAttemptDecision.LockedOut - Record Class in com.svenruppert.jsentinel.bruteforce: The caller is locked out.
LoginAttemptKey - Record Class in com.svenruppert.jsentinel.bruteforce: Composite key under which LoginAttemptStore tracks failed-attempt counters and the last failure instant.
LoginAttemptKey(TenantId, String, String) - Constructor for record class com.svenruppert.jsentinel.bruteforce.LoginAttemptKey: Validates the record components and normalises a null tenant to TenantId.DEFAULT.
loginAttemptPolicy() - Static method in class com.svenruppert.jsentinel.authorization.api.JSentinelServiceResolver: Returns the registered LoginAttemptPolicy, or NoopLoginAttemptPolicy.INSTANCE if no SPI implementation is configured.
LoginAttemptPolicy - Interface in com.svenruppert.jsentinel.bruteforce: Policy that throttles repeated failed login attempts.
LoginAttemptStore - Interface in com.svenruppert.jsentinel.bruteforce: Persistent counter store for the LoginAttemptPolicy family.
LoginFailed - Record Class in com.svenruppert.jsentinel.audit: A login attempt was rejected — credentials wrong, account unknown, or blocked by an upstream policy.
LoginFailed(Instant, String, String, String) - Constructor for record class com.svenruppert.jsentinel.audit.LoginFailed: Creates an instance of a LoginFailed record class.
loginRequired() - Static method in interface com.svenruppert.jsentinel.authorization.navigation.NavigationAccessDecision: Creates a NavigationAccessDecision.LoginRequired decision.
LoginRequired() - Constructor for record class com.svenruppert.jsentinel.authorization.navigation.NavigationAccessDecision.LoginRequired: Creates an instance of a LoginRequired record class.
loginRoute() - Method in record class com.svenruppert.jsentinel.session.SessionDecision.Invalidate: Returns the value of the loginRoute record component.
loginRoute() - Method in record class com.svenruppert.jsentinel.session.SessionDecision.RequireLogin: Returns the value of the loginRoute record component.
loginRoute() - Method in record class com.svenruppert.jsentinel.session.TimeoutSessionPolicy.Config: Returns the value of the loginRoute record component.
LoginSucceeded - Record Class in com.svenruppert.jsentinel.audit: Credentials were accepted and the subject is now authenticated.
LoginSucceeded(Instant, String, String, String) - Constructor for record class com.svenruppert.jsentinel.audit.LoginSucceeded: Creates an instance of a LoginSucceeded record class.
logout(SubjectId, LogoutScope) - Method in interface com.svenruppert.jsentinel.logout.LogoutService: Performs the logout.
logout(SubjectId, LogoutScope) - Method in class com.svenruppert.jsentinel.logout.NoopLogoutService
logout(SubjectId, LogoutScope) - Method in class com.svenruppert.jsentinel.logout.SubjectClearingLogoutService
LogoutListener - Interface in com.svenruppert.jsentinel.logout: Consumer-side callback for LogoutService events.
LogoutPerformed - Record Class in com.svenruppert.jsentinel.audit: A subject's session was terminated by an explicit logout.
LogoutPerformed(Instant, String, String, LogoutScope) - Constructor for record class com.svenruppert.jsentinel.audit.LogoutPerformed: Creates an instance of a LogoutPerformed record class.
LogoutScope - Enum Class in com.svenruppert.jsentinel.logout: Scope of a logout request.
logoutService() - Static method in class com.svenruppert.jsentinel.authorization.api.JSentinelServiceResolver: Returns the registered LogoutService, or NoopLogoutService.INSTANCE when none is configured.
LogoutService - Interface in com.svenruppert.jsentinel.logout: Bundles the logout flow so callers do not have to manually orchestrate subject removal, session invalidation and navigation.
lookup(String) - Method in class com.svenruppert.jsentinel.credential.password.policy.PasswordHashParameterValidatorRegistry: Looks up the validator that handles the given algorithm identifier.

M

MALFORMED_RESPONSE - Enum constant in enum class com.svenruppert.jsentinel.credential.compromised.CompromisedPasswordResult.FailureReason
markCompleted() - Method in class com.svenruppert.jsentinel.bootstrap.StoreBackedBootstrapStateService: Records the completion of the initial-admin bootstrap for the configured tenant at the current clock instant.
markConsumed(String, Instant) - Method in interface com.svenruppert.jsentinel.accountlifecycle.EmailVerificationTokenStore: Marks the record for tokenHash consumed.
markConsumed(String, Instant) - Method in class com.svenruppert.jsentinel.accountlifecycle.InMemoryEmailVerificationTokenStore
markConsumed(String, Instant) - Method in class com.svenruppert.jsentinel.accountlifecycle.InMemoryPasswordResetTokenStore
markConsumed(String, Instant) - Method in interface com.svenruppert.jsentinel.accountlifecycle.PasswordResetTokenStore: Marks the record for tokenHash consumed.
markConsumedIfCurrent(String, ResetTokenStatus) - Method in class com.svenruppert.jsentinel.credential.reset.InMemoryResetTokenStore
markConsumedIfCurrent(String, ResetTokenStatus) - Method in interface com.svenruppert.jsentinel.credential.reset.ResetTokenStore: Atomically marks the token CONSUMED if its current status still matches expectedStatus.
markExpiredIfCurrent(String, ResetTokenStatus) - Method in class com.svenruppert.jsentinel.credential.reset.InMemoryResetTokenStore
markExpiredIfCurrent(String, ResetTokenStatus) - Method in interface com.svenruppert.jsentinel.credential.reset.ResetTokenStore: Atomically marks the token EXPIRED if its current status still matches expectedStatus.
markReplaced(String, String, Instant) - Method in class com.svenruppert.jsentinel.authentication.InMemoryRefreshTokenStore
markReplaced(String, String, Instant) - Method in interface com.svenruppert.jsentinel.authentication.RefreshTokenStore: Links oldHash as replaced by newHash at at.
markRevoked(String, Instant) - Method in class com.svenruppert.jsentinel.authentication.InMemoryRefreshTokenStore
markRevoked(String, Instant) - Method in interface com.svenruppert.jsentinel.authentication.RefreshTokenStore: Marks the record for tokenHash revoked at at.
markUsed(String, Instant) - Method in interface com.svenruppert.jsentinel.authentication.ApiKeyStore: Updates the ApiKeyRecord.lastUsedAt() timestamp of the record for keyHash.
markUsed(String, Instant) - Method in class com.svenruppert.jsentinel.authentication.InMemoryApiKeyStore
MASS_ROTATION - Enum constant in enum class com.svenruppert.jsentinel.credential.emergency.EmergencyPolicyOverride.Reason: Mass forced credential rotation requested.
MassCredentialStatusChange - Class in com.svenruppert.jsentinel.credential.emergency: Operational helper for incident response: bulk-transition every named credential into a single target status (typically CredentialStatus.MUST_CHANGE or CredentialStatus.COMPROMISED).
MassCredentialStatusChange(CredentialStore, JSentinelAuditService, Clock) - Constructor for class com.svenruppert.jsentinel.credential.emergency.MassCredentialStatusChange
MassCredentialStatusChange.Report - Record Class in com.svenruppert.jsentinel.credential.emergency: Aggregate report of a mass status change.
Matched() - Constructor for record class com.svenruppert.jsentinel.credential.password.ProviderVerificationResult.Matched: Creates an instance of a Matched record class.
matches(AuditEvent) - Method in record class com.svenruppert.jsentinel.audit.AuditQuery
matches(PermissionName, PermissionName) - Static method in class com.svenruppert.jsentinel.authorization.api.permissions.PermissionMatcher: Checks whether the granted permission matches the required permission.
matches(String) - Method in record class com.svenruppert.jsentinel.bootstrap.BootstrapToken: Constant-time comparison against a candidate string.
MAX_ITERATIONS - Static variable in class com.svenruppert.jsentinel.credential.password.pbkdf2.Pbkdf2Defaults: Maximum iteration count accepted by the validator.
MAX_KEY_LENGTH - Static variable in class com.svenruppert.jsentinel.credential.password.pbkdf2.Pbkdf2Defaults: Maximum derived-key length in bytes.
MAX_KNOWN_WIRE_VALUE - Static variable in enum class com.svenruppert.jsentinel.credential.password.envelope.PasswordHashFormatVersion: Maximum wire value currently understood.
MAX_SALT_LENGTH - Static variable in class com.svenruppert.jsentinel.credential.password.pbkdf2.Pbkdf2Defaults: Maximum salt length in bytes.
maxConcurrent() - Method in record class com.svenruppert.jsentinel.credential.password.limiter.KdfResourceBudget: Returns the value of the maxConcurrent record component.
maximumParameters() - Static method in class com.svenruppert.jsentinel.credential.password.pbkdf2.Pbkdf2Defaults: Maximum-bound parameter map.
maximumParameters(String) - Method in class com.svenruppert.jsentinel.credential.password.policy.DefaultPasswordHashPolicy
maximumParameters(String) - Method in interface com.svenruppert.jsentinel.credential.password.policy.PasswordHashPolicy: Upper bound for each parameter value.
maximumParameters(String, Map) - Method in class com.svenruppert.jsentinel.credential.password.policy.DefaultPasswordHashPolicy.Builder
maxLengthChars() - Method in record class com.svenruppert.jsentinel.credential.input.PasswordInputPolicy: Returns the value of the maxLengthChars record component.
maxLockout() - Method in record class com.svenruppert.jsentinel.bruteforce.LoginAttemptConfiguration: Returns the value of the maxLockout record component.
maxWait() - Method in record class com.svenruppert.jsentinel.credential.password.limiter.KdfResourceBudget: Returns the value of the maxWait record component.
measuredMillis() - Method in record class com.svenruppert.jsentinel.credential.password.calibration.CalibrationProfile: Returns the value of the measuredMillis record component.
message() - Method in record class com.svenruppert.jsentinel.authorization.navigation.AccessDecision.RerouteToError: Returns the value of the message record component.
message() - Method in record class com.svenruppert.jsentinel.credential.password.ProviderVerificationResult.ProviderError: Returns the value of the message record component.
method() - Method in record class com.svenruppert.jsentinel.audit.StepUpChallenged: Returns the value of the method record component.
method() - Method in record class com.svenruppert.jsentinel.authorization.api.AuthorizationDecision.StepUpRequired: Returns the value of the method record component.
method() - Method in record class com.svenruppert.jsentinel.policy.api.PolicyDecision.StepUpRequired: Returns the value of the method record component.
methodName() - Method in record class com.svenruppert.jsentinel.credential.propagation.OutboundCall: Returns the value of the methodName record component.
MFA - Enum constant in enum class com.svenruppert.jsentinel.policy.api.PolicyDecision.StepUpMethod: Multi-factor authentication (e.g.
MIN_ITERATIONS - Static variable in class com.svenruppert.jsentinel.credential.password.pbkdf2.Pbkdf2Defaults: Minimum acceptable iteration count for stored hashes.
MIN_KEY_BYTES - Static variable in record class com.svenruppert.jsentinel.credential.password.pepper.PepperReference: Minimum key length expected for HMAC-SHA-256 (256-bit).
MIN_KEY_LENGTH - Static variable in class com.svenruppert.jsentinel.credential.password.pbkdf2.Pbkdf2Defaults: Minimum derived-key length in bytes.
MIN_SALT_LENGTH - Static variable in class com.svenruppert.jsentinel.credential.password.pbkdf2.Pbkdf2Defaults: Minimum salt length in bytes.
MinimumLengthPasswordPolicy - Class in com.svenruppert.jsentinel.bootstrap: Trivial password policy that only enforces a minimum length.
MinimumLengthPasswordPolicy(int) - Constructor for class com.svenruppert.jsentinel.bootstrap.MinimumLengthPasswordPolicy
minimumParameters() - Static method in class com.svenruppert.jsentinel.credential.password.pbkdf2.Pbkdf2Defaults: Minimum-bound parameter map.
minimumParameters(String) - Method in class com.svenruppert.jsentinel.credential.password.policy.DefaultPasswordHashPolicy
minimumParameters(String) - Method in interface com.svenruppert.jsentinel.credential.password.policy.PasswordHashPolicy: Lower bound for each parameter value.
minimumParameters(String, Map) - Method in class com.svenruppert.jsentinel.credential.password.policy.DefaultPasswordHashPolicy.Builder
minLengthChars() - Method in record class com.svenruppert.jsentinel.credential.input.PasswordInputPolicy: Returns the value of the minLengthChars record component.
mode() - Method in record class com.svenruppert.jsentinel.bootstrap.BootstrapConfiguration: Returns the value of the mode record component.
mode() - Method in class com.svenruppert.jsentinel.bootstrap.BootstrapStateService
mode() - Method in record class com.svenruppert.jsentinel.bootstrap.BootstrapStatus: Returns the value of the mode record component.
mode() - Method in class com.svenruppert.jsentinel.bootstrap.StoreBackedBootstrapStateService
MODE_ENV - Static variable in class com.svenruppert.jsentinel.bootstrap.BootstrapConfigurationLoader
MODE_PROPERTY - Static variable in class com.svenruppert.jsentinel.bootstrap.BootstrapConfigurationLoader
MUST_CHANGE - Enum constant in enum class com.svenruppert.jsentinel.credential.store.CredentialStatus

N

name() - Method in record class com.svenruppert.jsentinel.action.ActionPermission: Returns the value of the name record component.
name() - Method in record class com.svenruppert.jsentinel.authentication.ApiKeyRecord: Returns the value of the name record component.
name() - Method in record class com.svenruppert.jsentinel.credential.propagation.HeaderValue: Returns the value of the name record component.
name() - Method in interface com.svenruppert.jsentinel.credential.propagation.OutboundTokenStrategy
name() - Method in class com.svenruppert.jsentinel.credential.propagation.PassThroughStrategy
name() - Method in interface com.svenruppert.jsentinel.policy.api.Policy: Stable, unique name of this policy.
NAME - Static variable in class com.svenruppert.jsentinel.credential.propagation.PassThroughStrategy: Stable lookup key under which the strategy registers.
named(String) - Static method in interface com.svenruppert.jsentinel.policy.api.Policy: Starts a fluent builder for a policy with the given name.
NavigationAccessDecision - Interface in com.svenruppert.jsentinel.authorization.navigation: Result of a navigation security decision.
NavigationAccessDecision.AccessDenied - Record Class in com.svenruppert.jsentinel.authorization.navigation: The subject exists but lacks the required roles or permissions.
NavigationAccessDecision.Allowed - Record Class in com.svenruppert.jsentinel.authorization.navigation: Navigation is allowed.
NavigationAccessDecision.AlreadyLoggedIn - Record Class in com.svenruppert.jsentinel.authorization.navigation: The user is already logged in but is navigating to the login page.
NavigationAccessDecision.LoginRequired - Record Class in com.svenruppert.jsentinel.authorization.navigation: The route is restricted and no subject is in the session.
NavigationAccessDecisionService - Class in com.svenruppert.jsentinel.authorization.navigation: Pure decision service for navigation security.
NavigationAccessDecisionService() - Constructor for class com.svenruppert.jsentinel.authorization.navigation.NavigationAccessDecisionService: Creates a new instance.
NavigationJSentinelContext - Record Class in com.svenruppert.jsentinel.authorization.navigation: Vaadin-free context for making navigation security decisions.
NavigationJSentinelContext(Class, boolean, boolean, boolean) - Constructor for record class com.svenruppert.jsentinel.authorization.navigation.NavigationJSentinelContext: Creates an instance of a NavigationJSentinelContext record class.
navigationTarget() - Method in record class com.svenruppert.jsentinel.authorization.navigation.NavigationJSentinelContext: Returns the value of the navigationTarget record component.
needsRehash(PasswordHash) - Method in interface com.svenruppert.jsentinel.authentication.PasswordHasher: Reports whether storedHash was produced with parameters that differ from this hasher's current configuration.
needsRehash(PasswordHash) - Method in class com.svenruppert.jsentinel.authentication.Pbkdf2PasswordHasher
needsRehash(String) - Method in interface com.svenruppert.jsentinel.authentication.PasswordHasher: Convenience: parses storedHash via PasswordHasher.parse(String) and delegates to PasswordHasher.needsRehash(PasswordHash).
needsRehash(String) - Method in class com.svenruppert.jsentinel.credential.password.DefaultPasswordHashingService
needsRehash(String) - Method in interface com.svenruppert.jsentinel.credential.password.PasswordHashingService: Reports whether the supplied envelope should be rehashed under the active policy.
NETWORK - Enum constant in enum class com.svenruppert.jsentinel.credential.compromised.CompromisedPasswordResult.FailureReason
NewAdministrator - Record Class in com.svenruppert.jsentinel.bootstrap: Carrier record handed to AdministratorAccountStore.createAdministrator(NewAdministrator).
NewAdministrator(String, String, String, String) - Constructor for record class com.svenruppert.jsentinel.bootstrap.NewAdministrator: Defensive constructor — rejects null / blank username and passwordHash.
newHash() - Method in record class com.svenruppert.jsentinel.audit.TokenRotated: Returns the value of the newHash record component.
newPassword() - Method in record class com.svenruppert.jsentinel.credential.change.PasswordChangeCommand: Returns the value of the newPassword record component.
NewPasswordRejected(PasswordInputViolation) - Constructor for record class com.svenruppert.jsentinel.credential.change.PasswordChangeResult.NewPasswordRejected: Creates an instance of a NewPasswordRejected record class.
newRecord() - Method in record class com.svenruppert.jsentinel.credential.reset.ResetTokenUpdateResult.Updated: Returns the value of the newRecord record component.
newRecord() - Method in record class com.svenruppert.jsentinel.credential.store.CredentialUpdateResult.Updated: Returns the value of the newRecord record component.
next() - Method in record class com.svenruppert.jsentinel.session.JSentinelVersion: Returns the next-higher version.
No composition rules - Section in class com.svenruppert.jsentinel.credential.input.ContextAwarePasswordValidator
No leak - Section in interface com.svenruppert.jsentinel.credential.abuse.AbuseDetectionService
NoLimitKdfExecutionLimiter - Class in com.svenruppert.jsentinel.credential.password.limiter: Limiter that never blocks and never rejects.
NoLimitKdfExecutionLimiter() - Constructor for class com.svenruppert.jsentinel.credential.password.limiter.NoLimitKdfExecutionLimiter
NoOpCompromisedPasswordChecker - Class in com.svenruppert.jsentinel.credential.compromised: Default CompromisedPasswordChecker for deployments that deliberately operate without external breach data.
NoOpCredentialJSentinelMetrics - Class in com.svenruppert.jsentinel.credential.metrics: Default CredentialJSentinelMetrics that records nothing.
NoopJSentinelAuditService - Class in com.svenruppert.jsentinel.audit: Default JSentinelAuditService — discards every event and never retains anything.
NoopJSentinelAuditService() - Constructor for class com.svenruppert.jsentinel.audit.NoopJSentinelAuditService: Public for ServiceLoader discovery.
NoopLoginAttemptPolicy - Class in com.svenruppert.jsentinel.bruteforce: Default LoginAttemptPolicy — never throttles, never records.
NoopLoginAttemptPolicy() - Constructor for class com.svenruppert.jsentinel.bruteforce.NoopLoginAttemptPolicy: Public for ServiceLoader discovery.
NoopLogoutService - Class in com.svenruppert.jsentinel.logout: Default LogoutService — discards every call.
NoopLogoutService() - Constructor for class com.svenruppert.jsentinel.logout.NoopLogoutService: Public for ServiceLoader discovery.
NoOpPepperService - Class in com.svenruppert.jsentinel.credential.password.pepper: Phase-1a placeholder for PepperService.
NoOpPepperService() - Constructor for class com.svenruppert.jsentinel.credential.password.pepper.NoOpPepperService
NoopRoleHierarchy - Class in com.svenruppert.jsentinel.authorization.api.roles: Default RoleHierarchy: a held role implies only itself.
NoopSessionPolicy - Class in com.svenruppert.jsentinel.session: Default SessionPolicy — every navigation continues, login and logout do nothing.
NoopSessionPolicy() - Constructor for class com.svenruppert.jsentinel.session.NoopSessionPolicy: Public for ServiceLoader discovery.
normalisationForm() - Method in record class com.svenruppert.jsentinel.credential.input.PasswordInputPolicy: Returns the value of the normalisationForm record component.
normalize(SecretValue, PasswordInputPolicy) - Method in class com.svenruppert.jsentinel.credential.input.PasswordNormalizer: Returns a new SecretValue containing the normalised form.
notFound() - Method in record class com.svenruppert.jsentinel.credential.emergency.MassCredentialStatusChange.Report: Returns the value of the notFound record component.
NotFound() - Constructor for record class com.svenruppert.jsentinel.credential.change.PasswordChangeResult.NotFound: Creates an instance of a NotFound record class.
NotFound() - Constructor for record class com.svenruppert.jsentinel.credential.reset.ResetTokenUpdateResult.NotFound: Creates an instance of a NotFound record class.
NotFound() - Constructor for record class com.svenruppert.jsentinel.credential.store.CredentialUpdateResult.NotFound: Creates an instance of a NotFound record class.
NotMatched() - Constructor for record class com.svenruppert.jsentinel.credential.password.ProviderVerificationResult.NotMatched: Creates an instance of a NotMatched record class.
NotMatched() - Constructor for record class com.svenruppert.jsentinel.credential.token.TokenVerificationResult.NotMatched: Creates an instance of a NotMatched record class.
NotRequired() - Constructor for record class com.svenruppert.jsentinel.credential.password.RehashDecision.NotRequired: Creates an instance of a NotRequired record class.
now(String, String, String) - Static method in record class com.svenruppert.jsentinel.bruteforce.LoginAttemptContext: Factory for the common case — the policy supplies the timestamp.

O

observe(AbuseAttemptContext, AttemptOutcome) - Method in class com.svenruppert.jsentinel.credential.abuse.AbusePatternMonitor: Feed one attempt + outcome into the monitor.
occurrences() - Method in record class com.svenruppert.jsentinel.credential.compromised.CompromisedPasswordResult.Pwned: Returns the value of the occurrences record component.
of(TenantId) - Static method in record class com.svenruppert.jsentinel.credential.tenant.TenantCredentialContext: Convenience factory.
of(String) - Static method in record class com.svenruppert.jsentinel.authorization.api.tenant.TenantId: Factory mirror of the canonical constructor — useful when readers benefit from the explicit TenantId.of("…") shape, e.g. in fluent builders.
of(String) - Static method in record class com.svenruppert.jsentinel.logout.SubjectId: Convenience factory.
of(String) - Static method in record class com.svenruppert.jsentinel.session.SessionId: Factory mirror of the canonical constructor.
ofChars(char[]) - Static method in class com.svenruppert.jsentinel.credential.secret.SecretValue: Builds a SecretValue from a caller-owned char[].
ofString(String) - Static method in class com.svenruppert.jsentinel.credential.secret.SecretValue: Convenience overload for String inputs.
ofType(Class) - Static method in record class com.svenruppert.jsentinel.audit.AuditQuery: A query restricted to a single event type.
OidcAccessToken - Record Class in com.svenruppert.jsentinel.credential.propagation: OIDC access token.
OidcAccessToken(String, Optional, Optional, Optional) - Constructor for record class com.svenruppert.jsentinel.credential.propagation.OidcAccessToken: Creates an instance of a OidcAccessToken record class.
ok() - Static method in record class com.svenruppert.jsentinel.bootstrap.PasswordPolicy.PasswordPolicyResult
oldHash() - Method in record class com.svenruppert.jsentinel.audit.TokenRotated: Returns the value of the oldHash record component.
onFailure() - Method in record class com.svenruppert.jsentinel.credential.compromised.CompromisedPasswordPolicy: Returns the value of the onFailure record component.
onLogin(SessionContext) - Method in interface com.svenruppert.jsentinel.session.SessionPolicy: Called after a successful login.
onLogin(SessionContext) - Method in class com.svenruppert.jsentinel.session.TimeoutSessionPolicy
onLogout(SubjectId, String, LogoutScope) - Method in interface com.svenruppert.jsentinel.logout.LogoutListener: Fired once per logged-out session.
onLogout(SessionContext) - Method in interface com.svenruppert.jsentinel.session.SessionPolicy: Called when the subject explicitly logs out.
onLogout(SessionContext) - Method in class com.svenruppert.jsentinel.session.TimeoutSessionPolicy
operation() - Method in record class com.svenruppert.jsentinel.authorization.api.operations.SecuredOperationDescriptor: Returns the value of the operation record component.
operation() - Method in record class com.svenruppert.jsentinel.authorization.navigation.AccessContext: Returns the value of the operation record component.
operation() - Method in record class com.svenruppert.jsentinel.policy.api.ResourceAccessContext: Shortcut to the requested operation ("navigate", "invoke", ...).
operationEquals(String) - Static method in class com.svenruppert.jsentinel.policy.api.ContextPredicates: Matches when the wrapped access context's operation equals the given value.
OperationVisibilityService - Class in com.svenruppert.jsentinel.authorization.api.operations: Filters SecuredOperationDescriptors against a JSentinelSubject.
OperationVisibilityService(SecuredOperationRegistry) - Constructor for class com.svenruppert.jsentinel.authorization.api.operations.OperationVisibilityService
orIf(Predicate) - Method in class com.svenruppert.jsentinel.policy.api.PolicyBuilder: Alias of PolicyBuilder.allowIf(Predicate) for chained reading (e.g.
originalEncodedHash() - Method in record class com.svenruppert.jsentinel.credential.password.CredentialVerificationResult.Verified: Returns the value of the originalEncodedHash record component.
OTHER - Enum constant in enum class com.svenruppert.jsentinel.credential.emergency.EmergencyPolicyOverride.Reason: Other; details live in the incident record, not in this enum.
OutboundCall - Record Class in com.svenruppert.jsentinel.credential.propagation: Input record for OutboundTokenStrategy.resolve(OutboundCall, java.util.Optional).
OutboundCall(String, String, String, Map) - Constructor for record class com.svenruppert.jsentinel.credential.propagation.OutboundCall: Creates an instance of a OutboundCall record class.
OutboundHeaderContext - Class in com.svenruppert.jsentinel.credential.propagation: Thread-local bridge between the V00.74 wrapper (runtime PropagatingProxy or compile-time <Type>Propagating) and the application's HTTP client.
OutboundTokenStrategy - Interface in com.svenruppert.jsentinel.credential.propagation: Pluggable "how does the inbound token reach the downstream call" SPI.
ownerMatchesSubject(String, String) - Static method in class com.svenruppert.jsentinel.policy.api.ResourcePredicates: Matches when the resolved resource has an ownerAttribute value that equals the authenticated subject's subjectId.
ownerOrAdmin(String, String, String...) - Static method in class com.svenruppert.jsentinel.policy.api.JSentinelPolicies: The classic "owner-or-admin" pattern: an admin role passes, otherwise the subject must own the resource (the resource resolver's owner attribute equals the subject id).

P

PARAM_ITERATIONS - Static variable in class com.svenruppert.jsentinel.authentication.Pbkdf2PasswordHasher: Parameter key — iteration count.
PARAM_SALT - Static variable in class com.svenruppert.jsentinel.authentication.Pbkdf2PasswordHasher: Parameter key — base64-encoded salt.
parameter() - Method in record class com.svenruppert.jsentinel.authorization.navigation.AccessDecision.RerouteWithParameter: Returns the value of the parameter record component.
ParameterCalibrationService - Interface in com.svenruppert.jsentinel.credential.password.calibration: Produces a CalibrationProfile for a specific algorithm by running the underlying KDF and measuring its runtime.
parameters() - Method in record class com.svenruppert.jsentinel.authentication.PasswordHash: Returns the value of the parameters record component.
parameters() - Method in record class com.svenruppert.jsentinel.authorization.navigation.AccessDecision.RerouteWithParameters: Returns the value of the parameters record component.
parameters() - Method in record class com.svenruppert.jsentinel.credential.password.calibration.CalibrationProfile: Returns the value of the parameters record component.
parameters() - Method in record class com.svenruppert.jsentinel.credential.password.envelope.PasswordHashEnvelope: Returns the value of the parameters record component.
parameters() - Method in record class com.svenruppert.jsentinel.credential.password.PasswordHashResult: Returns the value of the parameters record component.
PARAMETERS_OUTDATED - Enum constant in enum class com.svenruppert.jsentinel.credential.password.RehashReason
parse(String) - Method in interface com.svenruppert.jsentinel.authentication.PasswordHasher: Parses a wire-format hash into a PasswordHash.
parse(String) - Method in class com.svenruppert.jsentinel.authentication.Pbkdf2PasswordHasher
parse(String) - Method in class com.svenruppert.jsentinel.credential.token.TokenDigestService: Parses the wire form selector.verifier.
PassThroughStrategy - Class in com.svenruppert.jsentinel.credential.propagation: Default OutboundTokenStrategy — forwards a bearer-style inbound token as Authorization: Bearer <value>.
password() - Method in record class com.svenruppert.jsentinel.bootstrap.CreateInitialAdminCommand: Returns the value of the password record component.
PASSWORD - Enum constant in enum class com.svenruppert.jsentinel.credential.CredentialType
PASSWORD_CHANGE - Enum constant in enum class com.svenruppert.jsentinel.credential.abuse.AbuseAttemptType
PASSWORD_RESET_COMPLETED - Enum constant in enum class com.svenruppert.jsentinel.accountlifecycle.JSentinelNotification.Kind: A password-reset token was consumed; confirm the change.
PASSWORD_RESET_REQUESTED - Enum constant in enum class com.svenruppert.jsentinel.accountlifecycle.JSentinelNotification.Kind: A password-reset token was issued; deliver the plain token.
PASSWORD_SPRAYING - Enum constant in enum class com.svenruppert.jsentinel.credential.abuse.AbusePattern: One client (or a narrow set) trying a single password against many usernames in a short window — see Konzept §13.
PasswordChangeCommand - Record Class in com.svenruppert.jsentinel.credential.change: Input to PasswordChangeService.change(PasswordChangeCommand).
PasswordChangeCommand(String, SecretValue, SecretValue) - Constructor for record class com.svenruppert.jsentinel.credential.change.PasswordChangeCommand: Creates an instance of a PasswordChangeCommand record class.
PasswordChangeResult - Interface in com.svenruppert.jsentinel.credential.change: Outcome of PasswordChangeService.change(PasswordChangeCommand).
PasswordChangeResult.Blocked - Record Class in com.svenruppert.jsentinel.credential.change: The current lifecycle status forbids credential changes (e.g.
PasswordChangeResult.Conflict - Record Class in com.svenruppert.jsentinel.credential.change: A concurrent password change won the compare-and-swap race.
PasswordChangeResult.CurrentPasswordRejected - Record Class in com.svenruppert.jsentinel.credential.change: Re-authentication failed — the supplied current password does not verify (CWE-620).
PasswordChangeResult.NewPasswordRejected - Record Class in com.svenruppert.jsentinel.credential.change: The new password violated the input policy (length, control chars, etc.) and was rejected before hashing.
PasswordChangeResult.NotFound - Record Class in com.svenruppert.jsentinel.credential.change: No credential exists under the supplied username.
PasswordChangeResult.Succeeded - Record Class in com.svenruppert.jsentinel.credential.change: Password successfully changed.
PasswordChangeService - Class in com.svenruppert.jsentinel.credential.change: Atomic, policy-driven password change.
PasswordChangeService(CredentialStore, PasswordHashingService, PasswordInputValidator, PasswordInputPolicy, CredentialLifecycleService, Clock) - Constructor for class com.svenruppert.jsentinel.credential.change.PasswordChangeService
PasswordContext - Record Class in com.svenruppert.jsentinel.credential.input: Adapter-neutral user / application context consumed by the ContextAwarePasswordValidator.
PasswordContext(String, Optional, Optional, TenantId, Set) - Constructor for record class com.svenruppert.jsentinel.credential.input.PasswordContext: Creates an instance of a PasswordContext record class.
passwordHash() - Method in record class com.svenruppert.jsentinel.bootstrap.NewAdministrator: Returns the value of the passwordHash record component.
PasswordHash - Record Class in com.svenruppert.jsentinel.authentication: Typed representation of a stored password hash.
PasswordHash(String, String, Map) - Constructor for record class com.svenruppert.jsentinel.authentication.PasswordHash: Creates an instance of a PasswordHash record class.
PasswordHashCodec - Class in com.svenruppert.jsentinel.credential.password.envelope: Self-describing envelope codec for Phase-1a password-hash strings.
PasswordHashCodec() - Constructor for class com.svenruppert.jsentinel.credential.password.envelope.PasswordHashCodec
PasswordHashEnvelope - Record Class in com.svenruppert.jsentinel.credential.password.envelope: Parsed view of a self-describing password-hash envelope.
PasswordHashEnvelope(PasswordHashFormatVersion, CredentialType, String, String, int, Optional, Map, String) - Constructor for record class com.svenruppert.jsentinel.credential.password.envelope.PasswordHashEnvelope: Creates an instance of a PasswordHashEnvelope record class.
PasswordHasher - Interface in com.svenruppert.jsentinel.authentication: Password hashing abstraction.
PasswordHashFormatException - Exception Class in com.svenruppert.jsentinel.credential.password.envelope: Thrown by PasswordHashCodec when the supplied input cannot be parsed as a valid Phase-1a envelope.
PasswordHashFormatException(String) - Constructor for exception class com.svenruppert.jsentinel.credential.password.envelope.PasswordHashFormatException
PasswordHashFormatException(String, Throwable) - Constructor for exception class com.svenruppert.jsentinel.credential.password.envelope.PasswordHashFormatException
PasswordHashFormatVersion - Enum Class in com.svenruppert.jsentinel.credential.password.envelope: Known envelope wire-format versions.
passwordHashingService() - Static method in class com.svenruppert.jsentinel.authorization.api.JSentinelServiceResolver: Returns the registered PasswordHasher, or a fresh Pbkdf2PasswordHasher when none is configured.
PasswordHashingService - Interface in com.svenruppert.jsentinel.credential.password: Front-door facade for the Phase-1a password hashing and verification pipeline.
PasswordHashingServices - Class in com.svenruppert.jsentinel.credential.password: Wiring helpers for the Phase-1a PasswordHashingService.
PasswordHashParameterValidator - Interface in com.svenruppert.jsentinel.credential.password.policy: Algorithm-specific validator for a parameters map carried by a password-hash envelope.
PasswordHashParameterValidatorRegistry - Class in com.svenruppert.jsentinel.credential.password.policy: Lookup of PasswordHashParameterValidators by algorithm identifier.
PasswordHashParameterValidatorRegistry(Collection) - Constructor for class com.svenruppert.jsentinel.credential.password.policy.PasswordHashParameterValidatorRegistry
PasswordHashPolicy - Interface in com.svenruppert.jsentinel.credential.password.policy: Active password-hashing policy.
PasswordHashProvider - Interface in com.svenruppert.jsentinel.credential.password.provider: Service-provider contract for a concrete password hashing implementation.
PasswordHashProviderRegistry - Class in com.svenruppert.jsentinel.credential.password.provider: Lookup of PasswordHashProviders by stored envelope metadata.
PasswordHashProviderRegistry(Collection) - Constructor for class com.svenruppert.jsentinel.credential.password.provider.PasswordHashProviderRegistry
PasswordHashRecord - Record Class in com.svenruppert.jsentinel.credential.password.envelope: Pair of an encoded envelope string and its parsed counterpart.
PasswordHashRecord(String, PasswordHashEnvelope) - Constructor for record class com.svenruppert.jsentinel.credential.password.envelope.PasswordHashRecord: Creates an instance of a PasswordHashRecord record class.
PasswordHashResult - Record Class in com.svenruppert.jsentinel.credential.password: Immutable result of a password-hashing operation.
PasswordHashResult(String, CredentialType, int, String, String, int, Optional, Map) - Constructor for record class com.svenruppert.jsentinel.credential.password.PasswordHashResult: Creates an instance of a PasswordHashResult record class.
PasswordHashValidationException - Exception Class in com.svenruppert.jsentinel.credential.password.policy: Thrown by PasswordHashValidator when a structurally well-formed envelope is rejected by the active PasswordHashPolicy.
PasswordHashValidationException(String) - Constructor for exception class com.svenruppert.jsentinel.credential.password.policy.PasswordHashValidationException
PasswordHashValidationException(String, Throwable) - Constructor for exception class com.svenruppert.jsentinel.credential.password.policy.PasswordHashValidationException
PasswordHashValidator - Interface in com.svenruppert.jsentinel.credential.password.policy: Validates a parsed envelope against the active policy before a KDF is executed.
PasswordHistoryDecision - Interface in com.svenruppert.jsentinel.credential.history: Outcome of PasswordHistoryService.evaluate(String, SecretValue, PasswordHistoryPolicy).
PasswordHistoryDecision.Allowed - Record Class in com.svenruppert.jsentinel.credential.history: The candidate password did not match any retained historical entry — proceed.
PasswordHistoryDecision.Reused - Record Class in com.svenruppert.jsentinel.credential.history: The candidate password matched one of the retained historical verifiers and must be rejected.
PasswordHistoryEntry - Record Class in com.svenruppert.jsentinel.credential.history: Single archived password verifier — the full envelope as it was stored at the time.
PasswordHistoryEntry(String, Instant) - Constructor for record class com.svenruppert.jsentinel.credential.history.PasswordHistoryEntry: Creates an instance of a PasswordHistoryEntry record class.
PasswordHistoryPolicy - Record Class in com.svenruppert.jsentinel.credential.history: Opt-in password-history policy.
PasswordHistoryPolicy(boolean, int) - Constructor for record class com.svenruppert.jsentinel.credential.history.PasswordHistoryPolicy: Creates an instance of a PasswordHistoryPolicy record class.
PasswordHistoryService - Class in com.svenruppert.jsentinel.credential.history: Coordinates the optional password-history check.
PasswordHistoryService(PasswordHistoryStore, PasswordHashingService) - Constructor for class com.svenruppert.jsentinel.credential.history.PasswordHistoryService
PasswordHistoryStore - Interface in com.svenruppert.jsentinel.credential.history: Persistence-neutral storage of historical password verifiers.
PasswordInputPolicy - Record Class in com.svenruppert.jsentinel.credential.input: Operator-configurable input hygiene rules for password material.
PasswordInputPolicy(int, int, boolean, Normalizer.Form, boolean) - Constructor for record class com.svenruppert.jsentinel.credential.input.PasswordInputPolicy: Creates an instance of a PasswordInputPolicy record class.
PasswordInputValidationResult - Interface in com.svenruppert.jsentinel.credential.input: Structured outcome of PasswordInputValidator.validate(SecretValue, PasswordInputPolicy).
PasswordInputValidationResult.Accepted - Record Class in com.svenruppert.jsentinel.credential.input
PasswordInputValidationResult.Rejected - Record Class in com.svenruppert.jsentinel.credential.input
PasswordInputValidator - Class in com.svenruppert.jsentinel.credential.input: Checks password input against the PasswordInputPolicy.
PasswordInputValidator() - Constructor for class com.svenruppert.jsentinel.credential.input.PasswordInputValidator
PasswordInputViolation - Enum Class in com.svenruppert.jsentinel.credential.input: Reason that input was rejected by the PasswordInputValidator.
PasswordNormalizer - Class in com.svenruppert.jsentinel.credential.input: Normalises password material under the active PasswordInputPolicy so that two equivalent Unicode representations of the same characters compare equal across hash/verify (CWE-176).
PasswordNormalizer() - Constructor for class com.svenruppert.jsentinel.credential.input.PasswordNormalizer
PasswordPolicy - Interface in com.svenruppert.jsentinel.bootstrap: Validates a candidate password against the minimum acceptance rules.
PasswordPolicy.PasswordPolicyResult - Record Class in com.svenruppert.jsentinel.bootstrap
PasswordPolicyResult(boolean, String) - Constructor for record class com.svenruppert.jsentinel.bootstrap.PasswordPolicy.PasswordPolicyResult: Creates an instance of a PasswordPolicyResult record class.
PasswordPolicyViolation(String) - Constructor for record class com.svenruppert.jsentinel.bootstrap.InitialAdminCreationResult.PasswordPolicyViolation: Creates an instance of a PasswordPolicyViolation record class.
PasswordResetCompleted - Record Class in com.svenruppert.jsentinel.audit: Emitted when a password-reset token is consumed and the password has been replaced.
PasswordResetCompleted(Instant, String, String) - Constructor for record class com.svenruppert.jsentinel.audit.PasswordResetCompleted: Validates the record components.
PasswordResetConsumeResult - Interface in com.svenruppert.jsentinel.credential.reset: Outcome of PasswordResetService.consume(String, SecretValue).
PasswordResetConsumeResult.Failed - Record Class in com.svenruppert.jsentinel.credential.reset
PasswordResetConsumeResult.Succeeded - Record Class in com.svenruppert.jsentinel.credential.reset
PasswordResetRequested - Record Class in com.svenruppert.jsentinel.audit: Emitted when a password-reset token is issued for a subject.
PasswordResetRequested(Instant, String, String) - Constructor for record class com.svenruppert.jsentinel.audit.PasswordResetRequested: Validates the record components.
PasswordResetService - Class in com.svenruppert.jsentinel.accountlifecycle: Password-reset workflow over a PasswordResetTokenStore.
PasswordResetService - Class in com.svenruppert.jsentinel.credential.reset: Password reset core service.
PasswordResetService(PasswordResetTokenStore, PasswordHasher, JSentinelAuditService, JSentinelNotificationSender) - Constructor for class com.svenruppert.jsentinel.accountlifecycle.PasswordResetService: Convenience constructor: tenant TenantId.DEFAULT, system clock, 256-bit token source.
PasswordResetService(PasswordResetTokenStore, PasswordHasher, JSentinelAuditService, JSentinelNotificationSender, TenantId, Clock, Supplier) - Constructor for class com.svenruppert.jsentinel.accountlifecycle.PasswordResetService: Full constructor.
PasswordResetService(CredentialStore, ResetTokenStore, TokenDigestService, PasswordHashingService, PasswordInputValidator, PasswordInputPolicy, CredentialLifecycleService, Clock) - Constructor for class com.svenruppert.jsentinel.credential.reset.PasswordResetService
PasswordResetService.IssuedToken - Record Class in com.svenruppert.jsentinel.accountlifecycle: Tuple returned from request: the plain token (caller forwards it to the user via the notification sender) and the persisted record (handy for tests / audit hooks).
PasswordResetTokenRecord - Record Class in com.svenruppert.jsentinel.accountlifecycle: Persistent representation of a single password-reset token.
PasswordResetTokenRecord(String, TenantId, SubjectId, Instant, Instant, Optional) - Constructor for record class com.svenruppert.jsentinel.accountlifecycle.PasswordResetTokenRecord: Validates the record components and normalises null tenant / null consumedAt.
PasswordResetTokenStore - Interface in com.svenruppert.jsentinel.accountlifecycle: Persistent store for PasswordResetTokenRecords — backs the planned password-reset workflow (V00.70 Phase 7).
path() - Method in record class com.svenruppert.jsentinel.authorization.navigation.AccessContext: Compatibility accessor for the former path component.
path() - Method in class com.svenruppert.jsentinel.bootstrap.FileBootstrapTokenStore
pattern() - Method in record class com.svenruppert.jsentinel.credential.abuse.AbusePatternSignal: Returns the value of the pattern record component.
pattern() - Method in record class com.svenruppert.jsentinel.credential.metrics.CredentialMetricEvent.AbuseSignal: Returns the value of the pattern record component.
Patterns - Section in class com.svenruppert.jsentinel.credential.abuse.AbusePatternMonitor
Pbkdf2Defaults - Class in com.svenruppert.jsentinel.credential.password.pbkdf2: Phase-1a reference parameters for the PBKDF2 password hashing path.
Pbkdf2ParameterCalibrator - Class in com.svenruppert.jsentinel.credential.password.pbkdf2: Calibrates the PBKDF2-HMAC-SHA-256 iteration count for a target verification runtime.
Pbkdf2ParameterCalibrator() - Constructor for class com.svenruppert.jsentinel.credential.password.pbkdf2.Pbkdf2ParameterCalibrator
Pbkdf2ParameterCalibrator(Pbkdf2PasswordHashProvider, LongSupplier, Clock, int, int) - Constructor for class com.svenruppert.jsentinel.credential.password.pbkdf2.Pbkdf2ParameterCalibrator
Pbkdf2ParameterNames - Class in com.svenruppert.jsentinel.credential.password.pbkdf2: Stable parameter-key constants used by the PBKDF2 envelope.
Pbkdf2ParameterValidator - Class in com.svenruppert.jsentinel.credential.password.pbkdf2: Parameter validator for the Phase-1a PBKDF2 algorithm.
Pbkdf2ParameterValidator() - Constructor for class com.svenruppert.jsentinel.credential.password.pbkdf2.Pbkdf2ParameterValidator
Pbkdf2PasswordHasher - Class in com.svenruppert.jsentinel.authentication: PBKDF2-HMAC-SHA256 hasher using only JDK APIs.
Pbkdf2PasswordHasher() - Constructor for class com.svenruppert.jsentinel.authentication.Pbkdf2PasswordHasher
Pbkdf2PasswordHasher(int, SecureRandom) - Constructor for class com.svenruppert.jsentinel.authentication.Pbkdf2PasswordHasher
Pbkdf2PasswordHashProvider - Class in com.svenruppert.jsentinel.credential.password.pbkdf2: JDK/JCA-only PBKDF2 password hash provider.
Pbkdf2PasswordHashProvider() - Constructor for class com.svenruppert.jsentinel.credential.password.pbkdf2.Pbkdf2PasswordHashProvider
Pbkdf2PasswordHashProvider(PasswordHashCodec, SecureRandom, Optional) - Constructor for class com.svenruppert.jsentinel.credential.password.pbkdf2.Pbkdf2PasswordHashProvider: Test/SPI constructor that lets callers inject a deterministic SecureRandom (for known-answer assertions) or pin the JCA provider (for FIPS-mode deployments).
Pbkdf2PasswordHashProvider(String) - Constructor for class com.svenruppert.jsentinel.credential.password.pbkdf2.Pbkdf2PasswordHashProvider
PEPPER_COMPROMISE - Enum constant in enum class com.svenruppert.jsentinel.credential.emergency.EmergencyPolicyOverride.Reason: Pepper key material is suspected or confirmed compromised.
PEPPER_KEY_ROTATED - Enum constant in enum class com.svenruppert.jsentinel.credential.password.RehashReason
PEPPER_KEY_UNKNOWN - Enum constant in enum class com.svenruppert.jsentinel.credential.password.dummy.DummyVerificationContext
PepperApplicationException(String) - Constructor for exception class com.svenruppert.jsentinel.credential.password.pepper.PepperApplicator.PepperApplicationException
PepperApplicator - Class in com.svenruppert.jsentinel.credential.password.pepper: Applies the optional post-KDF pepper as HMAC-SHA-256(pepperKey, kdfOutput).
PepperApplicator.PepperApplicationException - Exception Class in com.svenruppert.jsentinel.credential.password.pepper: Control-flow exception for pepper-application failures.
peppered() - Method in record class com.svenruppert.jsentinel.credential.metrics.CredentialMetricEvent.HashDuration: Returns the value of the peppered record component.
pepperKeyId() - Method in record class com.svenruppert.jsentinel.credential.password.CredentialVerificationResult.Verified: Returns the value of the pepperKeyId record component.
pepperKeyId() - Method in record class com.svenruppert.jsentinel.credential.password.envelope.PasswordHashEnvelope: Returns the value of the pepperKeyId record component.
pepperKeyId() - Method in record class com.svenruppert.jsentinel.credential.password.PasswordHashResult: Returns the value of the pepperKeyId record component.
pepperKeyIdPresent() - Method in record class com.svenruppert.jsentinel.audit.CredentialVerificationSucceeded: Returns the value of the pepperKeyIdPresent record component.
PepperReference - Record Class in com.svenruppert.jsentinel.credential.password.pepper: Resolved pepper material handed to a PasswordHashProvider.
PepperReference(String, byte[]) - Constructor for record class com.svenruppert.jsentinel.credential.password.pepper.PepperReference: Creates an instance of a PepperReference record class.
PepperService - Interface in com.svenruppert.jsentinel.credential.password.pepper: Resolves the pepper material associated with a stored pepper key id.
PermissionAuthorizationService - Interface in com.svenruppert.jsentinel.authorization.api: Extension of AuthorizationService that requires permission support.
PermissionBasedAccessEvaluator<T,U> - Class in com.svenruppert.jsentinel.authorization.api.permissions: Base implementation for permission-based access evaluation.
PermissionBasedAccessEvaluator() - Constructor for class com.svenruppert.jsentinel.authorization.api.permissions.PermissionBasedAccessEvaluator: Creates a new instance.
PermissionCatalog - Interface in com.svenruppert.jsentinel.authorization.api.permissions: Application-provided catalog of known permissions.
PermissionGuard - Class in com.svenruppert.jsentinel.authorization.api: Stateless permission/role checks.
PermissionMatcher - Class in com.svenruppert.jsentinel.authorization.api.permissions: Generic permission matching helper.
permissionName() - Method in record class com.svenruppert.jsentinel.authorization.api.permissions.PermissionName: Returns the value of the permissionName record component.
PermissionName - Record Class in com.svenruppert.jsentinel.authorization.api.permissions: Wrapper for a permission name string.
PermissionName(String) - Constructor for record class com.svenruppert.jsentinel.authorization.api.permissions.PermissionName: Creates a permission name.
permissionNames() - Method in record class com.svenruppert.jsentinel.authorization.api.JSentinelSubject
permissionNames() - Method in interface com.svenruppert.jsentinel.authorization.api.permissions.HasPermissions: Returns the permission names assigned to the subject.
permissions() - Method in record class com.svenruppert.jsentinel.authorization.api.JSentinelSubject: Returns the value of the permissions record component.
permissionsFor(RoleName) - Method in interface com.svenruppert.jsentinel.authorization.api.permissions.RolePermissionMapping: Returns permissions assigned to the given role.
permissionsFor(RoleName) - Method in class com.svenruppert.jsentinel.authorization.api.permissions.StaticRolePermissionMapping
permissionsFor(U) - Method in interface com.svenruppert.jsentinel.authorization.api.AuthorizationService: Returns the permissions assigned to the given subject.
permissionsFor(U) - Method in interface com.svenruppert.jsentinel.authorization.api.PermissionAuthorizationService: Returns the permissions assigned to the given subject.
permissionsForRoles(Set, RolePermissionMapping) - Static method in class com.svenruppert.jsentinel.authorization.api.permissions.RolePermissionResolver: Resolves the union of permissions associated with the supplied roles, without consulting any RoleHierarchy.
permissionsForRoles(Set, RolePermissionMapping, RoleHierarchy) - Static method in class com.svenruppert.jsentinel.authorization.api.permissions.RolePermissionResolver: Resolves the union of permissions associated with the supplied roles and every role they imply via the supplied hierarchy.
permissive() - Static method in record class com.svenruppert.jsentinel.credential.standards.FipsProfile: Permissive default: no FIPS claims.
persistent(Path) - Static method in record class com.svenruppert.jsentinel.bootstrap.BootstrapConfiguration
persistent(Path, Duration) - Static method in record class com.svenruppert.jsentinel.bootstrap.BootstrapConfiguration
PERSISTENT_FILE - Enum constant in enum class com.svenruppert.jsentinel.bootstrap.BootstrapMode
plainToken() - Method in record class com.svenruppert.jsentinel.accountlifecycle.EmailVerificationService.IssuedToken: Returns the value of the plainToken record component.
plainToken() - Method in record class com.svenruppert.jsentinel.accountlifecycle.PasswordResetService.IssuedToken: Returns the value of the plainToken record component.
plainToken() - Method in record class com.svenruppert.jsentinel.authentication.StoreBackedRememberMeService.IssuedToken: Returns the value of the plainToken record component.
Policy - Interface in com.svenruppert.jsentinel.policy.api: Named, single-shot authorisation rule.
POLICY_VERSION_OUTDATED - Enum constant in enum class com.svenruppert.jsentinel.credential.password.RehashReason
PolicyBuilder - Class in com.svenruppert.jsentinel.policy.api: Fluent builder for Policy instances.
PolicyContext - Record Class in com.svenruppert.jsentinel.policy.api: Input to a Policy evaluation.
PolicyContext(AccessContext, String) - Constructor for record class com.svenruppert.jsentinel.policy.api.PolicyContext: Convenience constructor using an empty resourceAttributes map and no ResourceRef.
PolicyContext(AccessContext, String, ResourceRef) - Constructor for record class com.svenruppert.jsentinel.policy.api.PolicyContext: Convenience constructor with a ResourceRef and an empty resourceAttributes map.
PolicyContext(AccessContext, String, Map) - Constructor for record class com.svenruppert.jsentinel.policy.api.PolicyContext: Convenience constructor without a ResourceRef.
PolicyContext(AccessContext, String, Optional, Map) - Constructor for record class com.svenruppert.jsentinel.policy.api.PolicyContext: Creates a policy context with defensive copies.
PolicyDecision - Interface in com.svenruppert.jsentinel.policy.api: Outcome of a Policy evaluation.
PolicyDecision.Allowed - Record Class in com.svenruppert.jsentinel.policy.api: Access is permitted.
PolicyDecision.Denied - Record Class in com.svenruppert.jsentinel.policy.api: Access is denied.
PolicyDecision.StepUpMethod - Enum Class in com.svenruppert.jsentinel.policy.api: Step-up mechanism a policy may ask for.
PolicyDecision.StepUpRequired - Record Class in com.svenruppert.jsentinel.policy.api: Subject is authenticated but a step-up challenge is required before access can be granted.
PolicyDecisions - Class in com.svenruppert.jsentinel.policy.api: Bridge from the policy-specific PolicyDecision sealed hierarchy down to the adapter-neutral AuthorizationDecision contract used by the existing AuthorizationEvaluator pipeline.
PolicyEvaluated - Record Class in com.svenruppert.jsentinel.audit: A named Policy was evaluated against a PolicyContext.
PolicyEvaluated(Instant, String, String, String, String) - Constructor for record class com.svenruppert.jsentinel.audit.PolicyEvaluated: Creates an instance of a PolicyEvaluated record class.
policyName() - Method in record class com.svenruppert.jsentinel.audit.PolicyEvaluated: Returns the value of the policyName record component.
policyName() - Method in record class com.svenruppert.jsentinel.policy.api.PolicyContext: Returns the value of the policyName record component.
policyRegistry() - Static method in class com.svenruppert.jsentinel.authorization.api.JSentinelServiceResolver: Returns the registered PolicyRegistry, or a fresh InMemoryPolicyRegistry when none is configured.
PolicyRegistry - Interface in com.svenruppert.jsentinel.policy.spi: Lookup + evaluation SPI for named policies.
policyVersion() - Method in record class com.svenruppert.jsentinel.audit.CredentialVerificationSucceeded: Returns the value of the policyVersion record component.
policyVersion() - Method in record class com.svenruppert.jsentinel.credential.metrics.CredentialMetricEvent.HashDuration: Returns the value of the policyVersion record component.
policyVersion() - Method in record class com.svenruppert.jsentinel.credential.metrics.CredentialMetricEvent.VerifyDuration: Returns the value of the policyVersion record component.
policyVersion() - Method in record class com.svenruppert.jsentinel.credential.password.CredentialVerificationResult.Verified: Returns the value of the policyVersion record component.
policyVersion() - Method in record class com.svenruppert.jsentinel.credential.password.envelope.PasswordHashEnvelope: Returns the value of the policyVersion record component.
policyVersion() - Method in record class com.svenruppert.jsentinel.credential.password.PasswordHashResult: Returns the value of the policyVersion record component.
policyVersion() - Method in class com.svenruppert.jsentinel.credential.password.policy.DefaultPasswordHashPolicy
policyVersion() - Method in interface com.svenruppert.jsentinel.credential.password.policy.PasswordHashPolicy: Monotonically increasing version of this policy.
policyVersion(int) - Method in class com.svenruppert.jsentinel.credential.password.policy.DefaultPasswordHashPolicy.Builder
preferredAlgorithm() - Method in class com.svenruppert.jsentinel.credential.password.policy.DefaultPasswordHashPolicy
preferredAlgorithm() - Method in interface com.svenruppert.jsentinel.credential.password.policy.PasswordHashPolicy: Algorithm identifier the policy emits for new hashes.
preferredAlgorithm(String) - Method in class com.svenruppert.jsentinel.credential.password.policy.DefaultPasswordHashPolicy.Builder
preferredFormatVersion() - Method in class com.svenruppert.jsentinel.credential.password.policy.DefaultPasswordHashPolicy
preferredFormatVersion() - Method in interface com.svenruppert.jsentinel.credential.password.policy.PasswordHashPolicy: Envelope wire format the policy emits for new hashes.
preferredFormatVersion(PasswordHashFormatVersion) - Method in class com.svenruppert.jsentinel.credential.password.policy.DefaultPasswordHashPolicy.Builder
preferredProviderId() - Method in class com.svenruppert.jsentinel.credential.password.policy.DefaultPasswordHashPolicy
preferredProviderId() - Method in interface com.svenruppert.jsentinel.credential.password.policy.PasswordHashPolicy: Provider identifier the policy emits for new hashes.
preferredProviderId(String) - Method in class com.svenruppert.jsentinel.credential.password.policy.DefaultPasswordHashPolicy.Builder
Proceed() - Constructor for record class com.svenruppert.jsentinel.credential.lifecycle.CredentialLifecycleDecision.Proceed: Creates an instance of a Proceed record class.
PropagateToken - Annotation Interface in com.svenruppert.jsentinel.annotations: Marker for client interfaces / methods whose outbound HTTP call must carry a PropagateTokenAdvisor-resolved header (typically the Bearer token of the current subject, optionally exchanged via TokenExchangeStrategy).
PropagateTokenAdvisor - Interface in com.svenruppert.jsentinel.credential.propagation: Pluggable advisor that turns a PropagateToken-annotated call + the current TokenCredential into an HeaderValue to bind on the outbound HTTP request.
PropagateTokenAdvisor.Default - Class in com.svenruppert.jsentinel.credential.propagation: Stateless default advisor: looks up the strategy by PropagateToken.strategy() via JSentinelServiceResolver.findOutboundTokenStrategy(String), calls its resolve with the store's current credential, and — when PropagateToken.header() is non-empty — overrides the strategy's chosen header name.
ProtectedBy - Annotation Interface in com.svenruppert.jsentinel.authorization.annotations: Delegates evaluation to a project-provided AuthorizationEvaluator.
ProtectedByEvaluator - Class in com.svenruppert.jsentinel.authorization.api: Evaluates ProtectedBy by delegating to the evaluator declared on the annotation instance.
ProtectedByEvaluator() - Constructor for class com.svenruppert.jsentinel.authorization.api.ProtectedByEvaluator
PROVIDER_COMPROMISE - Enum constant in enum class com.svenruppert.jsentinel.credential.emergency.EmergencyPolicyOverride.Reason: A cryptographic provider has been revoked or recalled.
PROVIDER_DEPRECATED - Enum constant in enum class com.svenruppert.jsentinel.credential.password.RehashReason
PROVIDER_ID - Static variable in class com.svenruppert.jsentinel.credential.password.pbkdf2.Pbkdf2ParameterNames: Canonical Phase-1a JDK provider id.
PROVIDER_MISSING - Enum constant in enum class com.svenruppert.jsentinel.credential.password.dummy.DummyVerificationContext
ProviderError(InternalAuditEventType, String) - Constructor for record class com.svenruppert.jsentinel.credential.password.ProviderVerificationResult.ProviderError: Creates an instance of a ProviderError record class.
providerId() - Method in record class com.svenruppert.jsentinel.audit.CredentialVerificationSucceeded: Returns the value of the providerId record component.
providerId() - Method in record class com.svenruppert.jsentinel.credential.metrics.CredentialMetricEvent.HashDuration: Returns the value of the providerId record component.
providerId() - Method in record class com.svenruppert.jsentinel.credential.metrics.CredentialMetricEvent.VerifyDuration: Returns the value of the providerId record component.
providerId() - Method in record class com.svenruppert.jsentinel.credential.password.calibration.CalibrationProfile: Returns the value of the providerId record component.
providerId() - Method in record class com.svenruppert.jsentinel.credential.password.CredentialVerificationResult.Verified: Returns the value of the providerId record component.
providerId() - Method in record class com.svenruppert.jsentinel.credential.password.envelope.PasswordHashEnvelope: Returns the value of the providerId record component.
providerId() - Method in record class com.svenruppert.jsentinel.credential.password.PasswordHashResult: Returns the value of the providerId record component.
providerId() - Method in class com.svenruppert.jsentinel.credential.password.pbkdf2.Pbkdf2PasswordHashProvider
providerId() - Method in interface com.svenruppert.jsentinel.credential.password.provider.PasswordHashProvider: Logical provider identifier, stable across releases.
providers() - Method in class com.svenruppert.jsentinel.credential.password.provider.PasswordHashProviderRegistry: Returns the providers registered with this instance.
ProviderVerificationResult - Interface in com.svenruppert.jsentinel.credential.password: Provider-level outcome of running a KDF and comparing the derived material against the stored inner hash.
ProviderVerificationResult.Matched - Record Class in com.svenruppert.jsentinel.credential.password
ProviderVerificationResult.NotMatched - Record Class in com.svenruppert.jsentinel.credential.password
ProviderVerificationResult.ProviderError - Record Class in com.svenruppert.jsentinel.credential.password
publicFailureType() - Method in record class com.svenruppert.jsentinel.credential.password.CredentialVerificationResult.Failed: Returns the value of the publicFailureType record component.
PublicFailureType - Enum Class in com.svenruppert.jsentinel.credential: Generic, public-facing failure classification used by UI- and API-near layers to react to a denied credential verification.
publish(AuditEvent) - Method in class com.svenruppert.jsentinel.audit.CompositeAuditService
publish(AuditEvent) - Method in class com.svenruppert.jsentinel.audit.DefaultCompositeAuditService
publish(AuditEvent) - Method in interface com.svenruppert.jsentinel.audit.JSentinelAuditService: Records the given event.
publish(AuditEvent) - Method in class com.svenruppert.jsentinel.audit.NoopJSentinelAuditService
publish(AuditEvent) - Method in class com.svenruppert.jsentinel.audit.StoreBackedJSentinelAuditService
publish(CredentialMetricEvent) - Method in interface com.svenruppert.jsentinel.credential.metrics.CredentialJSentinelMetrics: Records one event.
publish(CredentialMetricEvent) - Method in class com.svenruppert.jsentinel.credential.metrics.NoOpCredentialJSentinelMetrics
publish(String, String, CredentialVerificationResult, RehashDecision) - Method in class com.svenruppert.jsentinel.credential.password.audit.CredentialAuditPublisher: Publishes the appropriate audit event for the supplied verification outcome.
publishRehash(String, String, String, RehashReason, int) - Method in class com.svenruppert.jsentinel.credential.password.audit.CredentialAuditPublisher: Publishes a CredentialRehashed event after a successful compare-and-swap upgrade in the credential store.
purgeExpired() - Method in class com.svenruppert.jsentinel.accountlifecycle.EmailVerificationService: Purges every expired record in the backing store.
purgeExpired() - Method in class com.svenruppert.jsentinel.accountlifecycle.PasswordResetService: Purges every expired record in the backing store.
purgeExpired() - Method in class com.svenruppert.jsentinel.authentication.StoreBackedRememberMeService: Purges every expired token in the backing store.
purgeExpired() - Method in class com.svenruppert.jsentinel.authentication.TokenService: Purges every expired record.
purgeExpired(Instant) - Method in interface com.svenruppert.jsentinel.accountlifecycle.EmailVerificationTokenStore: Drops every record whose expiresAt is at or before now.
purgeExpired(Instant) - Method in class com.svenruppert.jsentinel.accountlifecycle.InMemoryEmailVerificationTokenStore
purgeExpired(Instant) - Method in class com.svenruppert.jsentinel.accountlifecycle.InMemoryPasswordResetTokenStore
purgeExpired(Instant) - Method in interface com.svenruppert.jsentinel.accountlifecycle.PasswordResetTokenStore: Drops every record whose expiresAt is at or before now.
purgeExpired(Instant) - Method in interface com.svenruppert.jsentinel.authentication.ApiKeyStore: Drops every record whose ApiKeyRecord.expiresAt() is at or before now.
purgeExpired(Instant) - Method in class com.svenruppert.jsentinel.authentication.InMemoryApiKeyStore
purgeExpired(Instant) - Method in class com.svenruppert.jsentinel.authentication.InMemoryRefreshTokenStore
purgeExpired(Instant) - Method in class com.svenruppert.jsentinel.authentication.InMemoryRememberMeTokenStore
purgeExpired(Instant) - Method in interface com.svenruppert.jsentinel.authentication.RefreshTokenStore: Drops every record whose RefreshTokenRecord.expiresAt() is at or before now.
purgeExpired(Instant) - Method in interface com.svenruppert.jsentinel.authentication.RememberMeTokenStore: Drops every token whose expiresAt is at or before now.
purgeOlderThan(Instant) - Method in interface com.svenruppert.jsentinel.audit.AuditEventStore: Drops every persisted envelope whose underlying event predates cutoff, for retention purposes.
purgeOlderThan(Instant) - Method in class com.svenruppert.jsentinel.audit.InMemoryAuditEventStore
purgeOlderThan(Instant) - Method in class com.svenruppert.jsentinel.ratelimiting.InMemoryRateLimitStore
purgeOlderThan(Instant) - Method in interface com.svenruppert.jsentinel.ratelimiting.RateLimitStore: Across every key, drops events whose timestamp is strictly before cutoff.
purgeOldEvents() - Method in class com.svenruppert.jsentinel.ratelimiting.InMemoryRateLimitPolicy: Convenience: purges every event older than now - window across all keys.
put(RoleName, Set) - Method in class com.svenruppert.jsentinel.authorization.api.permissions.StaticRolePermissionMapping.Builder
put(String, String...) - Method in class com.svenruppert.jsentinel.authorization.api.permissions.StaticRolePermissionMapping.Builder
Pwned(long) - Constructor for record class com.svenruppert.jsentinel.credential.compromised.CompromisedPasswordResult.Pwned: Creates an instance of a Pwned record class.

Q

query(AuditQuery) - Method in class com.svenruppert.jsentinel.audit.CompositeAuditService
query(AuditQuery) - Method in class com.svenruppert.jsentinel.audit.DefaultCompositeAuditService
query(AuditQuery) - Method in interface com.svenruppert.jsentinel.audit.JSentinelAuditService: Returns retained events matching query, oldest first.
query(AuditQuery) - Method in class com.svenruppert.jsentinel.audit.NoopJSentinelAuditService
query(AuditQuery) - Method in class com.svenruppert.jsentinel.audit.RingBufferAuditSink: Returns a snapshot of retained events that match query, oldest first.
query(AuditQuery) - Method in class com.svenruppert.jsentinel.audit.StoreBackedJSentinelAuditService
query(TenantId, AuditQuery) - Method in interface com.svenruppert.jsentinel.audit.AuditEventStore: Returns every persisted envelope under tenant that matches query, in insertion order (oldest first).
query(TenantId, AuditQuery) - Method in class com.svenruppert.jsentinel.audit.InMemoryAuditEventStore

R

RATE_LIMITED - Enum constant in enum class com.svenruppert.jsentinel.credential.compromised.CompromisedPasswordResult.FailureReason
RateLimitDecision - Interface in com.svenruppert.jsentinel.ratelimiting: Result of a RateLimitPolicy.tryAcquire(RateLimitKey) call.
RateLimitDecision.Allowed - Record Class in com.svenruppert.jsentinel.ratelimiting: The event was admitted; the caller proceeds.
RateLimitDecision.Throttled - Record Class in com.svenruppert.jsentinel.ratelimiting: The event was refused — the per-window count is already at or above the configured limit.
RateLimitExceeded - Record Class in com.svenruppert.jsentinel.audit: Emitted by RateLimitPolicy.tryAcquire when an event was refused because the per-key event count within the configured window equals or exceeds the limit.
RateLimitExceeded(Instant, String, String, int, Duration, int) - Constructor for record class com.svenruppert.jsentinel.audit.RateLimitExceeded: Validates the record components.
RateLimitKey - Record Class in com.svenruppert.jsentinel.ratelimiting: Composite key under which RateLimitStore tracks event timestamps for sliding-window rate-limiting.
RateLimitKey(TenantId, String) - Constructor for record class com.svenruppert.jsentinel.ratelimiting.RateLimitKey: Validates the record components and normalises a null tenant to TenantId.DEFAULT.
RateLimitPolicy - Interface in com.svenruppert.jsentinel.ratelimiting: Pluggable rate-limiting decision point — separate from LoginAttemptPolicy (which is purpose-built for password-guessing detection) and from SessionPolicy (which is about session lifetime).
RateLimitStore - Interface in com.svenruppert.jsentinel.ratelimiting: Persistent event store for sliding-window rate-limiting policies (V00.70 Phase 7c).
reason() - Method in record class com.svenruppert.jsentinel.audit.AccessDenied: Returns the value of the reason record component.
reason() - Method in record class com.svenruppert.jsentinel.audit.ApiKeyDenied: Returns the value of the reason record component.
reason() - Method in record class com.svenruppert.jsentinel.audit.BootstrapTokenRejected: Returns the value of the reason record component.
reason() - Method in record class com.svenruppert.jsentinel.audit.CredentialRehashed: Returns the value of the reason record component.
reason() - Method in record class com.svenruppert.jsentinel.audit.CredentialStatusChanged: Returns the value of the reason record component.
reason() - Method in record class com.svenruppert.jsentinel.audit.LoginFailed: Returns the value of the reason record component.
reason() - Method in record class com.svenruppert.jsentinel.audit.PolicyEvaluated: Returns the value of the reason record component.
reason() - Method in record class com.svenruppert.jsentinel.audit.SessionExpired: Returns the value of the reason record component.
reason() - Method in record class com.svenruppert.jsentinel.audit.SessionInvalidated: Returns the value of the reason record component.
reason() - Method in record class com.svenruppert.jsentinel.audit.StepUpChallenged: Returns the value of the reason record component.
reason() - Method in record class com.svenruppert.jsentinel.authorization.api.AuthorizationDecision.Forbidden: Returns the value of the reason record component.
reason() - Method in record class com.svenruppert.jsentinel.authorization.api.AuthorizationDecision.StepUpRequired: Returns the value of the reason record component.
reason() - Method in record class com.svenruppert.jsentinel.authorization.api.AuthorizationDecision.Unauthenticated: Returns the value of the reason record component.
reason() - Method in record class com.svenruppert.jsentinel.bootstrap.InitialAdminCreationResult.InternalError: Returns the value of the reason record component.
reason() - Method in record class com.svenruppert.jsentinel.bootstrap.InitialAdminCreationResult.InvalidUsername: Returns the value of the reason record component.
reason() - Method in record class com.svenruppert.jsentinel.bootstrap.InitialAdminCreationResult.PasswordPolicyViolation: Returns the value of the reason record component.
reason() - Method in record class com.svenruppert.jsentinel.bootstrap.PasswordPolicy.PasswordPolicyResult: Returns the value of the reason record component.
reason() - Method in record class com.svenruppert.jsentinel.credential.compromised.CompromisedPasswordResult.CheckFailed: Returns the value of the reason record component.
reason() - Method in record class com.svenruppert.jsentinel.credential.emergency.EmergencyPolicyOverride: Returns the value of the reason record component.
reason() - Method in record class com.svenruppert.jsentinel.credential.metrics.CredentialMetricEvent.RehashRequested: Returns the value of the reason record component.
reason() - Method in record class com.svenruppert.jsentinel.credential.password.RehashDecision.Required: Returns the value of the reason record component.
reason() - Method in record class com.svenruppert.jsentinel.policy.api.PolicyDecision.Allowed: Returns the value of the reason record component.
reason() - Method in record class com.svenruppert.jsentinel.policy.api.PolicyDecision.Denied: Returns the value of the reason record component.
reason() - Method in record class com.svenruppert.jsentinel.policy.api.PolicyDecision.StepUpRequired: Returns the value of the reason record component.
reason() - Method in record class com.svenruppert.jsentinel.session.SessionDecision.Invalidate: Returns the value of the reason record component.
REAUTH - Enum constant in enum class com.svenruppert.jsentinel.policy.api.PolicyDecision.StepUpMethod: Re-authentication with the primary credentials.
recent(String, int) - Method in class com.svenruppert.jsentinel.credential.history.InMemoryPasswordHistoryStore
recent(String, int) - Method in interface com.svenruppert.jsentinel.credential.history.PasswordHistoryStore: Returns the max most recent entries for username, newest first.
record() - Method in record class com.svenruppert.jsentinel.accountlifecycle.EmailVerificationService.IssuedToken: Returns the value of the record record component.
record() - Method in record class com.svenruppert.jsentinel.accountlifecycle.PasswordResetService.IssuedToken: Returns the value of the record record component.
record() - Method in record class com.svenruppert.jsentinel.authentication.StoreBackedRememberMeService.IssuedToken: Returns the value of the record record component.
recordedAt() - Method in record class com.svenruppert.jsentinel.credential.history.PasswordHistoryEntry: Returns the value of the recordedAt record component.
recordEvent(RateLimitKey, Instant) - Method in class com.svenruppert.jsentinel.ratelimiting.InMemoryRateLimitStore
recordEvent(RateLimitKey, Instant) - Method in interface com.svenruppert.jsentinel.ratelimiting.RateLimitStore: Appends one event timestamp under key.
recordFailure(LoginAttemptContext) - Method in class com.svenruppert.jsentinel.bruteforce.InMemoryLoginAttemptPolicy
recordFailure(LoginAttemptContext) - Method in interface com.svenruppert.jsentinel.bruteforce.LoginAttemptPolicy: Records a failed attempt.
recordFailure(LoginAttemptContext) - Method in class com.svenruppert.jsentinel.bruteforce.NoopLoginAttemptPolicy
recordFailure(LoginAttemptContext) - Method in class com.svenruppert.jsentinel.bruteforce.StoreBackedLoginAttemptPolicy
recordFailure(LoginAttemptKey, Instant) - Method in class com.svenruppert.jsentinel.bruteforce.InMemoryLoginAttemptStore
recordFailure(LoginAttemptKey, Instant) - Method in interface com.svenruppert.jsentinel.bruteforce.LoginAttemptStore: Increments the failure counter for key by one and updates its last-failure instant to at.
recordNew(String, String, Instant, PasswordHistoryPolicy) - Method in class com.svenruppert.jsentinel.credential.history.PasswordHistoryService: Records the new envelope in the per-user history and trims to the retention size.
recordOutcome(AbuseAttemptContext, AttemptOutcome) - Method in interface com.svenruppert.jsentinel.credential.abuse.AbuseDetectionService: Records the outcome of the operation so the counters can update.
recordOutcome(AbuseAttemptContext, AttemptOutcome) - Method in class com.svenruppert.jsentinel.credential.abuse.InMemoryAbuseDetectionService
recordSuccess(LoginAttemptContext) - Method in class com.svenruppert.jsentinel.bruteforce.InMemoryLoginAttemptPolicy
recordSuccess(LoginAttemptContext) - Method in interface com.svenruppert.jsentinel.bruteforce.LoginAttemptPolicy: Records a successful attempt.
recordSuccess(LoginAttemptContext) - Method in class com.svenruppert.jsentinel.bruteforce.NoopLoginAttemptPolicy
recordSuccess(LoginAttemptContext) - Method in class com.svenruppert.jsentinel.bruteforce.StoreBackedLoginAttemptPolicy
referencePolicy() - Static method in class com.svenruppert.jsentinel.credential.password.pbkdf2.Pbkdf2Defaults: Convenience: build a single-algorithm reference policy that emits PBKDF2 envelopes with the Phase-1a defaults.
refreshExpiresAt() - Method in record class com.svenruppert.jsentinel.authentication.TokenService.TokenPair: Returns the value of the refreshExpiresAt record component.
refreshToken() - Method in record class com.svenruppert.jsentinel.authentication.TokenService.TokenPair: Returns the value of the refreshToken record component.
RefreshToken - Record Class in com.svenruppert.jsentinel.credential.propagation: Refresh token.
RefreshToken(String, Optional, Optional, Optional) - Constructor for record class com.svenruppert.jsentinel.credential.propagation.RefreshToken: Creates an instance of a RefreshToken record class.
RefreshTokenRecord - Record Class in com.svenruppert.jsentinel.authentication: Persistent representation of a single rotating refresh token.
RefreshTokenRecord(String, TenantId, SubjectId, Instant, Instant, Optional, Optional) - Constructor for record class com.svenruppert.jsentinel.authentication.RefreshTokenRecord: Validates the record components and normalises null tenant / Optionals.
RefreshTokenStore - Interface in com.svenruppert.jsentinel.authentication: Persistent store for RefreshTokenRecords — backs the planned rotating-refresh-token flow (V00.70 Phase 7b).
register(SecuredOperationDescriptor) - Method in class com.svenruppert.jsentinel.authorization.api.operations.SecuredOperationRegistry
register(CredentialRecord) - Method in class com.svenruppert.jsentinel.credential.store.InMemoryCredentialStore: Inserts a new record.
register(SubjectId, String) - Method in class com.svenruppert.jsentinel.logout.InMemorySubjectSessionRegistry
register(SubjectId, String) - Method in class com.svenruppert.jsentinel.logout.StoreBackedSubjectSessionRegistry
register(SubjectId, String) - Method in interface com.svenruppert.jsentinel.logout.SubjectSessionRegistry: Records that sessionId belongs to subjectId.
register(Policy) - Method in class com.svenruppert.jsentinel.policy.impl.InMemoryPolicyRegistry
register(Policy) - Method in interface com.svenruppert.jsentinel.policy.spi.PolicyRegistry: Registers a policy.
register(ResourceResolver) - Method in class com.svenruppert.jsentinel.policy.impl.InMemoryResourceResolverRegistry
register(ResourceResolver) - Method in interface com.svenruppert.jsentinel.policy.spi.ResourceResolverRegistry: Registers a resolver.
registerOutboundTokenStrategy(String, OutboundTokenStrategy) - Static method in class com.svenruppert.jsentinel.authorization.api.JSentinelServiceResolver: V00.74 — register an OutboundTokenStrategy under a name.
REHASH_REQUIRED - Enum constant in enum class com.svenruppert.jsentinel.credential.store.CredentialStatus
RehashDecision - Interface in com.svenruppert.jsentinel.credential.password: Whether a successfully verified credential should be transparently rehashed under the currently active policy.
RehashDecision.NotRequired - Record Class in com.svenruppert.jsentinel.credential.password
RehashDecision.Required - Record Class in com.svenruppert.jsentinel.credential.password
RehashDecisionEngine - Class in com.svenruppert.jsentinel.credential.password.rehash: Computes whether a successfully verified envelope must be transparently rehashed under the active policy.
RehashDecisionEngine() - Constructor for class com.svenruppert.jsentinel.credential.password.rehash.RehashDecisionEngine
RehashReason - Enum Class in com.svenruppert.jsentinel.credential.password: Concrete reason that causes a stored credential to be flagged for transparent rehashing on the next successful verification.
RehashRequested(RehashReason) - Constructor for record class com.svenruppert.jsentinel.credential.metrics.CredentialMetricEvent.RehashRequested: Creates an instance of a RehashRequested record class.
rehashRequired() - Method in record class com.svenruppert.jsentinel.audit.CredentialVerificationSucceeded: Returns the value of the rehashRequired record component.
rejectControlCharacters() - Method in record class com.svenruppert.jsentinel.credential.input.PasswordInputPolicy: Returns the value of the rejectControlCharacters record component.
Rejected(PasswordInputViolation) - Constructor for record class com.svenruppert.jsentinel.credential.input.PasswordInputValidationResult.Rejected: Creates an instance of a Rejected record class.
rejectedFormatVersions() - Method in class com.svenruppert.jsentinel.credential.password.policy.DefaultPasswordHashPolicy
rejectedFormatVersions() - Method in interface com.svenruppert.jsentinel.credential.password.policy.PasswordHashPolicy: Envelope format versions the operator has explicitly rejected.
rejectedPolicyVersions() - Method in class com.svenruppert.jsentinel.credential.password.policy.DefaultPasswordHashPolicy
rejectedPolicyVersions() - Method in interface com.svenruppert.jsentinel.credential.password.policy.PasswordHashPolicy: Policy versions the operator has explicitly rejected.
rejectFormatVersion(int) - Method in class com.svenruppert.jsentinel.credential.password.policy.DefaultPasswordHashPolicy.Builder: Marks an envelope format wire value as explicitly rejected.
rejectPolicyVersion(int) - Method in class com.svenruppert.jsentinel.credential.password.policy.DefaultPasswordHashPolicy.Builder: Marks an envelope policy version as explicitly rejected.
remaining() - Method in record class com.svenruppert.jsentinel.bruteforce.LoginAttemptDecision.LockedOut: Returns the value of the remaining record component.
RememberMeTokenRecord - Record Class in com.svenruppert.jsentinel.authentication: Persistent representation of a single "remember me" token.
RememberMeTokenRecord(String, TenantId, SubjectId, Instant, Instant) - Constructor for record class com.svenruppert.jsentinel.authentication.RememberMeTokenRecord: Validates the record components and normalises null tenant to TenantId.DEFAULT.
RememberMeTokenStore - Interface in com.svenruppert.jsentinel.authentication: Persistent store for RememberMeTokenRecords — backs the planned "remember me" / persistent-login flow (V00.70 Phase 7).
removeListener(LogoutListener) - Method in interface com.svenruppert.jsentinel.logout.LogoutService: Removes a previously registered listener.
removeListener(LogoutListener) - Method in class com.svenruppert.jsentinel.logout.NoopLogoutService
removeListener(LogoutListener) - Method in class com.svenruppert.jsentinel.logout.SubjectClearingLogoutService
replacedByHash() - Method in record class com.svenruppert.jsentinel.authentication.RefreshTokenRecord: Returns the value of the replacedByHash record component.
Report(int, int, int, int) - Constructor for record class com.svenruppert.jsentinel.credential.emergency.MassCredentialStatusChange.Report: Creates an instance of a Report record class.
request(SubjectId, String, Duration) - Method in class com.svenruppert.jsentinel.accountlifecycle.EmailVerificationService: Issues a verification token for subjectId / email.
request(SubjectId, Duration) - Method in class com.svenruppert.jsentinel.accountlifecycle.PasswordResetService: Issues a new reset token.
RequireAdditionalCheck(AbuseDimension) - Constructor for record class com.svenruppert.jsentinel.credential.abuse.AbuseDecision.RequireAdditionalCheck: Creates an instance of a RequireAdditionalCheck record class.
requireAllowed(U, ActionPermission) - Method in interface com.svenruppert.jsentinel.action.ActionAuthorizationService: Throws AccessDeniedException if the subject is not allowed.
requireAllowed(U, ActionPermission) - Method in class com.svenruppert.jsentinel.action.StaticActionAuthorizationService
requireAllPermissions(String...) - Static method in class com.svenruppert.jsentinel.authorization.api.JSentinelEnforcer: Asserts the current subject holds every listed permission.
requireAnyPermission(String...) - Static method in class com.svenruppert.jsentinel.authorization.api.JSentinelEnforcer: Asserts the current subject holds at least one of the listed permissions.
requireAnyRole(String...) - Static method in class com.svenruppert.jsentinel.authorization.api.JSentinelEnforcer: Asserts the current subject holds at least one of the listed roles (role-hierarchy implications are honored).
required(TenantId) - Static method in record class com.svenruppert.jsentinel.bootstrap.BootstrapState: Builds the "bootstrap still required" state for tenant.
Required(RehashReason, int) - Constructor for record class com.svenruppert.jsentinel.credential.password.RehashDecision.Required: Creates an instance of a Required record class.
requiredPermissions() - Method in record class com.svenruppert.jsentinel.authorization.api.operations.SecuredOperationDescriptor: Returns the value of the requiredPermissions record component.
requiredPermissions(T) - Method in class com.svenruppert.jsentinel.authorization.api.permissions.PermissionBasedAccessEvaluator: Extracts the set of required permissions from the restriction annotation.
requiredRoles() - Method in record class com.svenruppert.jsentinel.authorization.api.operations.SecuredOperationDescriptor: Returns the value of the requiredRoles record component.
requiredRoles(T) - Method in interface com.svenruppert.jsentinel.authorization.api.roles.RoleBasedAccessEvaluatorAPI: Mapping from a custom annotation to the set of role names required for access.
RequireLogin(String) - Constructor for record class com.svenruppert.jsentinel.session.SessionDecision.RequireLogin: Creates an instance of a RequireLogin record class.
requireMfa(String) - Static method in class com.svenruppert.jsentinel.policy.api.JSentinelPolicies: Convenience: step-up required with MFA, default reason "Multi-factor authentication required".
requirePermission(HasPermissions, PermissionName) - Static method in class com.svenruppert.jsentinel.authorization.api.PermissionGuard
requirePermission(String) - Static method in class com.svenruppert.jsentinel.authorization.api.JSentinelEnforcer: Asserts the current subject holds the given permission.
requirePolicy(String) - Static method in class com.svenruppert.jsentinel.authorization.api.JSentinelEnforcer: Convenience overload using "method" as resource type and "invoke" as operation.
requirePolicy(String, String, String, String) - Static method in class com.svenruppert.jsentinel.authorization.api.JSentinelEnforcer: Asserts the named policy admits the current subject for the supplied resource type / operation.
requireRole(HasRoles, RoleName) - Static method in class com.svenruppert.jsentinel.authorization.api.PermissionGuard
requireRole(String) - Static method in class com.svenruppert.jsentinel.authorization.api.JSentinelEnforcer: Asserts the current subject holds the given role (role-hierarchy implications are honored).
RequiresAllPermissions - Annotation Interface in com.svenruppert.jsentinel.authorization.annotations: Requires the current subject to hold all listed permissions (AND-semantics).
RequiresAllPermissionsEvaluator - Class in com.svenruppert.jsentinel.authorization.api.permissions: Generic evaluator for RequiresAllPermissions — AND-semantics across the listed permissions.
RequiresAllPermissionsEvaluator() - Constructor for class com.svenruppert.jsentinel.authorization.api.permissions.RequiresAllPermissionsEvaluator: Creates a new evaluator instance.
RequiresAnyPermission - Annotation Interface in com.svenruppert.jsentinel.authorization.annotations: Requires the current subject to hold at least one of the listed permissions (OR-semantics).
RequiresAnyPermissionEvaluator - Class in com.svenruppert.jsentinel.authorization.api.permissions: Generic evaluator for RequiresAnyPermission — OR-semantics across the listed permissions.
RequiresAnyPermissionEvaluator() - Constructor for class com.svenruppert.jsentinel.authorization.api.permissions.RequiresAnyPermissionEvaluator: Creates a new evaluator instance.
RequiresPermission - Annotation Interface in com.svenruppert.jsentinel.authorization.annotations: Requires the current subject to have all listed permissions.
RequiresPermissionEvaluator - Class in com.svenruppert.jsentinel.authorization.api.permissions: Generic evaluator for RequiresPermission.
RequiresPermissionEvaluator() - Constructor for class com.svenruppert.jsentinel.authorization.api.permissions.RequiresPermissionEvaluator
RequiresPolicy - Annotation Interface in com.svenruppert.jsentinel.authorization.annotations: Requires the named Policy (registered with the resolved PolicyRegistry) to Allow the current request.
RequiresPolicyEvaluator - Class in com.svenruppert.jsentinel.policy.impl: Bridges RequiresPolicy into the existing AuthorizationEvaluator pipeline.
RequiresPolicyEvaluator() - Constructor for class com.svenruppert.jsentinel.policy.impl.RequiresPolicyEvaluator: Creates a new evaluator instance.
RequiresRole - Annotation Interface in com.svenruppert.jsentinel.authorization.annotations: Requires the current subject to have at least one listed role.
RequiresRoleEvaluator - Class in com.svenruppert.jsentinel.authorization.api.roles: Generic evaluator for RequiresRole.
RequiresRoleEvaluator() - Constructor for class com.svenruppert.jsentinel.authorization.api.roles.RequiresRoleEvaluator
requireStepUp(String, PolicyDecision.StepUpMethod, String) - Static method in class com.svenruppert.jsentinel.policy.api.JSentinelPolicies: Step-up gate: every access request is approved only after the caller satisfies a step-up authentication (typically MFA).
reroute(String) - Static method in interface com.svenruppert.jsentinel.authorization.navigation.AccessDecision: Creates a reroute decision.
reroute(String, boolean) - Static method in interface com.svenruppert.jsentinel.authorization.navigation.AccessDecision: Creates a AccessDecision.Reroute decision with a redirect target.
Reroute(String, boolean) - Constructor for record class com.svenruppert.jsentinel.authorization.navigation.AccessDecision.Reroute: Creates an instance of a Reroute record class.
rerouteToError(Class, String) - Static method in interface com.svenruppert.jsentinel.authorization.navigation.AccessDecision: Creates a AccessDecision.RerouteToError decision that reroutes to an error page.
RerouteToError(Class, String) - Constructor for record class com.svenruppert.jsentinel.authorization.navigation.AccessDecision.RerouteToError: Creates an instance of a RerouteToError record class.
RerouteWithParameter(String, T) - Constructor for record class com.svenruppert.jsentinel.authorization.navigation.AccessDecision.RerouteWithParameter: Creates an instance of a RerouteWithParameter record class.
RerouteWithParameters(String, List) - Constructor for record class com.svenruppert.jsentinel.authorization.navigation.AccessDecision.RerouteWithParameters: Creates an instance of a RerouteWithParameters record class.
reset() - Static method in class com.svenruppert.jsentinel.authorization.api.SubjectStores: Clears the cached store.
reset() - Method in class com.svenruppert.jsentinel.bootstrap.StoreBackedBootstrapStateService: Removes any recorded completion for the configured tenant.
reset(LoginAttemptKey) - Method in class com.svenruppert.jsentinel.bruteforce.InMemoryLoginAttemptStore
reset(LoginAttemptKey) - Method in interface com.svenruppert.jsentinel.bruteforce.LoginAttemptStore: Clears any state associated with key — used after a successful login to start the counter from zero again.
reset(RateLimitKey) - Method in class com.svenruppert.jsentinel.ratelimiting.InMemoryRateLimitPolicy: Resets the per-key state — typically after a successful authentication that cancels the throttle.
reset(RateLimitKey) - Method in class com.svenruppert.jsentinel.ratelimiting.InMemoryRateLimitStore
reset(RateLimitKey) - Method in interface com.svenruppert.jsentinel.ratelimiting.RateLimitStore: Drops every recorded event under key.
reset(JSentinelVersionKey) - Method in class com.svenruppert.jsentinel.session.InMemoryJSentinelVersionStore
reset(JSentinelVersionKey) - Method in interface com.svenruppert.jsentinel.session.JSentinelVersionStore: Resets the version for key to JSentinelVersion.INITIAL.
RESET_ABUSE - Enum constant in enum class com.svenruppert.jsentinel.credential.abuse.AbusePattern: A burst of password-reset requests for the same identity or from the same client — automated reset abuse.
RESET_ABUSE - Enum constant in enum class com.svenruppert.jsentinel.credential.emergency.EmergencyPolicyOverride.Reason: Sustained credential reset abuse.
RESET_CONSUME - Enum constant in enum class com.svenruppert.jsentinel.credential.abuse.AbuseAttemptType
RESET_PENDING - Enum constant in enum class com.svenruppert.jsentinel.credential.store.CredentialStatus
RESET_REQUEST - Enum constant in enum class com.svenruppert.jsentinel.credential.abuse.AbuseAttemptType
resetAbuseAttempts() - Method in record class com.svenruppert.jsentinel.credential.abuse.AbusePatternMonitor.Config: Returns the value of the resetAbuseAttempts record component.
resetAbuseWindow() - Method in record class com.svenruppert.jsentinel.credential.abuse.AbusePatternMonitor.Config: Returns the value of the resetAbuseWindow record component.
resetAll() - Static method in class com.svenruppert.jsentinel.authorization.api.JSentinelServiceResolver
ResetInProgress() - Constructor for record class com.svenruppert.jsentinel.credential.lifecycle.CredentialLifecycleDecision.ResetInProgress: Creates an instance of a ResetInProgress record class.
ResetTokenCreationResult - Interface in com.svenruppert.jsentinel.credential.reset: Outcome of PasswordResetService.issue(String, Duration).
ResetTokenCreationResult.Blocked - Record Class in com.svenruppert.jsentinel.credential.reset
ResetTokenCreationResult.Created - Record Class in com.svenruppert.jsentinel.credential.reset: Returned token.
ResetTokenCreationResult.UnknownUser - Record Class in com.svenruppert.jsentinel.credential.reset
ResetTokenRecord - Record Class in com.svenruppert.jsentinel.credential.reset: Persisted password-reset token.
ResetTokenRecord(TokenDigestRecord, String, Instant, Instant, ResetTokenStatus, long) - Constructor for record class com.svenruppert.jsentinel.credential.reset.ResetTokenRecord: Creates an instance of a ResetTokenRecord record class.
ResetTokenStatus - Enum Class in com.svenruppert.jsentinel.credential.reset: Lifecycle of a stored password-reset token.
ResetTokenStore - Interface in com.svenruppert.jsentinel.credential.reset: Persistence-neutral storage of password-reset tokens.
ResetTokenUpdateResult - Interface in com.svenruppert.jsentinel.credential.reset
ResetTokenUpdateResult.NotFound - Record Class in com.svenruppert.jsentinel.credential.reset
ResetTokenUpdateResult.Stale - Record Class in com.svenruppert.jsentinel.credential.reset
ResetTokenUpdateResult.Updated - Record Class in com.svenruppert.jsentinel.credential.reset
resolve(OutboundCall, Optional) - Method in interface com.svenruppert.jsentinel.credential.propagation.OutboundTokenStrategy
resolve(OutboundCall, Optional) - Method in class com.svenruppert.jsentinel.credential.propagation.PassThroughStrategy
resolve(TenantCredentialContext) - Method in class com.svenruppert.jsentinel.credential.tenant.DefaultTenantAwarePasswordHashPolicyResolver
resolve(TenantCredentialContext) - Method in interface com.svenruppert.jsentinel.credential.tenant.TenantAwarePasswordHashPolicyResolver
resolve(String) - Method in class com.svenruppert.jsentinel.credential.password.pepper.InMemoryPepperService
resolve(String) - Method in class com.svenruppert.jsentinel.credential.password.pepper.NoOpPepperService
resolve(String) - Method in interface com.svenruppert.jsentinel.credential.password.pepper.PepperService: Resolves the pepper material for a previously stored hash.
resolve(String) - Method in interface com.svenruppert.jsentinel.policy.spi.ResourceResolver: Loads the domain object for the given resource id, or returns empty if no such resource exists.
resolve(String, String) - Method in class com.svenruppert.jsentinel.credential.password.provider.PasswordHashProviderRegistry: Resolves the provider associated with the given envelope metadata.
resolve(U) - Method in interface com.svenruppert.jsentinel.authorization.api.SubjectIdResolver: Returns the SubjectId for subject.
resolveAttributes(ResourceRef) - Method in class com.svenruppert.jsentinel.policy.impl.InMemoryResourceResolverRegistry
resolveAttributes(ResourceRef) - Method in interface com.svenruppert.jsentinel.policy.spi.ResourceResolverRegistry: Resolves the given reference and returns the resolver's attribute map.
ResourceAccessContext - Record Class in com.svenruppert.jsentinel.policy.api: Composite of an adapter-neutral AccessContext and the concrete ResourceRef the request is about.
ResourceAccessContext(AccessContext, ResourceRef) - Constructor for record class com.svenruppert.jsentinel.policy.api.ResourceAccessContext: Validates the record components.
resourceAttributeEquals(String, Object) - Static method in class com.svenruppert.jsentinel.policy.api.ContextPredicates: Matches when the PolicyContext.resourceAttributes() map contains key with the given value.
resourceAttributeEquals(String, String, Object) - Static method in class com.svenruppert.jsentinel.policy.api.ResourcePredicates: Matches when the resolved resource's attribute value equals expected.
resourceAttributes() - Method in record class com.svenruppert.jsentinel.policy.api.PolicyContext: Returns the value of the resourceAttributes record component.
resourceEstimate(Map) - Method in interface com.svenruppert.jsentinel.credential.password.provider.PasswordHashProvider: Optional resource estimate for the supplied parameter map.
ResourceEstimate - Record Class in com.svenruppert.jsentinel.credential.password.provider: Coarse resource estimate produced by a PasswordHashProvider for a given parameter set.
ResourceEstimate(long, long) - Constructor for record class com.svenruppert.jsentinel.credential.password.provider.ResourceEstimate: Creates an instance of a ResourceEstimate record class.
resourceId() - Method in record class com.svenruppert.jsentinel.policy.api.ResourceRef: Returns the value of the resourceId record component.
resourceName() - Method in record class com.svenruppert.jsentinel.authorization.api.operations.SecuredOperationDescriptor: Returns the value of the resourceName record component.
resourceName() - Method in record class com.svenruppert.jsentinel.authorization.navigation.AccessContext: Returns the value of the resourceName record component.
ResourcePredicates - Class in com.svenruppert.jsentinel.policy.api: Predicate factories that branch on the ResourceRef carried by a PolicyContext.
resourceRef() - Method in record class com.svenruppert.jsentinel.policy.api.PolicyContext: Returns the value of the resourceRef record component.
resourceRef() - Method in record class com.svenruppert.jsentinel.policy.api.ResourceAccessContext: Returns the value of the resourceRef record component.
ResourceRef - Record Class in com.svenruppert.jsentinel.policy.api: Stable reference to a concrete protected resource — the domain object an admission rule wants to reason about (a document, a user, a project, …).
ResourceRef(String, String) - Constructor for record class com.svenruppert.jsentinel.policy.api.ResourceRef: Convenience constructor for single-tenant call sites: implicitly targets TenantId.DEFAULT.
ResourceRef(String, String, TenantId) - Constructor for record class com.svenruppert.jsentinel.policy.api.ResourceRef: Validates the record components and substitutes TenantId.DEFAULT for a null tenant.
ResourceResolver<T> - Interface in com.svenruppert.jsentinel.policy.spi: Application-provided adapter that materialises a ResourceRef into a domain object and exposes the attributes a policy might want to reason about (owner id, status, …).
resourceResolverRegistry() - Static method in class com.svenruppert.jsentinel.authorization.api.JSentinelServiceResolver: Returns the registered ResourceResolverRegistry, or a fresh InMemoryResourceResolverRegistry when none is configured.
ResourceResolverRegistry - Interface in com.svenruppert.jsentinel.policy.spi: Lookup of ResourceResolvers by resource type and one-shot ResourceResolverRegistry.resolveAttributes(ResourceRef) pipeline for policy predicates.
resourceType() - Method in record class com.svenruppert.jsentinel.authorization.api.operations.SecuredOperationDescriptor: Returns the value of the resourceType record component.
resourceType() - Method in record class com.svenruppert.jsentinel.authorization.navigation.AccessContext: Returns the value of the resourceType record component.
resourceType() - Method in record class com.svenruppert.jsentinel.policy.api.ResourceRef: Returns the value of the resourceType record component.
resourceType() - Method in interface com.svenruppert.jsentinel.policy.spi.ResourceResolver: Stable, non-blank resource type identifier (e.g.
resourceTypeEquals(String) - Static method in class com.svenruppert.jsentinel.policy.api.ContextPredicates: Matches when the wrapped access context's resource type equals the given value.
restricted() - Method in record class com.svenruppert.jsentinel.authorization.navigation.NavigationJSentinelContext: Returns the value of the restricted record component.
retain(int) - Static method in record class com.svenruppert.jsentinel.credential.history.PasswordHistoryPolicy: History enabled with retainLast verifiers per user.
retainLast() - Method in record class com.svenruppert.jsentinel.credential.history.PasswordHistoryPolicy: Returns the value of the retainLast record component.
retryAfter() - Method in record class com.svenruppert.jsentinel.credential.abuse.AbuseDecision.Block: Returns the value of the retryAfter record component.
retryAfter() - Method in record class com.svenruppert.jsentinel.ratelimiting.RateLimitDecision.Throttled: Returns the value of the retryAfter record component.
Reused() - Constructor for record class com.svenruppert.jsentinel.credential.history.PasswordHistoryDecision.Reused: Creates an instance of a Reused record class.
revoke(String) - Method in class com.svenruppert.jsentinel.authentication.StoreBackedRememberMeService: Revokes the supplied plain token.
revoke(String) - Method in class com.svenruppert.jsentinel.authentication.TokenService: Marks the refresh token revoked.
revoke(String, Instant) - Method in interface com.svenruppert.jsentinel.authentication.ApiKeyStore: Marks the record for keyHash revoked at at.
revoke(String, Instant) - Method in class com.svenruppert.jsentinel.authentication.InMemoryApiKeyStore
revokeAll(SubjectId) - Method in class com.svenruppert.jsentinel.accountlifecycle.EmailVerificationService: Drops every token issued to subjectId in this service's tenant.
revokeAll(SubjectId) - Method in class com.svenruppert.jsentinel.accountlifecycle.PasswordResetService: Drops every token issued to subjectId in this service's tenant.
revokeAll(SubjectId) - Method in class com.svenruppert.jsentinel.authentication.StoreBackedRememberMeService: Revokes every token issued to subjectId in this service's tenant.
revokeAll(SubjectId) - Method in class com.svenruppert.jsentinel.authentication.TokenService: Drops every refresh token issued to subjectId in this service's tenant.
REVOKED - Enum constant in enum class com.svenruppert.jsentinel.credential.reset.ResetTokenStatus
REVOKED - Enum constant in enum class com.svenruppert.jsentinel.session.SessionStatus: Session was terminated explicitly by logout or an admin revoke.
revokedAt() - Method in record class com.svenruppert.jsentinel.authentication.ApiKeyRecord: Returns the value of the revokedAt record component.
revokedAt() - Method in record class com.svenruppert.jsentinel.authentication.RefreshTokenRecord: Returns the value of the revokedAt record component.
revokedBy() - Method in record class com.svenruppert.jsentinel.audit.RoleRevoked: Returns the value of the revokedBy record component.
revokeRole(RoleAssignmentKey, RoleName) - Method in class com.svenruppert.jsentinel.authorization.api.roles.InMemoryRoleAssignmentStore
revokeRole(RoleAssignmentKey, RoleName) - Method in interface com.svenruppert.jsentinel.authorization.api.roles.RoleAssignmentStore: Removes a single role from key's set.
ringBuffer() - Method in class com.svenruppert.jsentinel.audit.CompositeAuditService: Visible for application setup code that wants to consult the buffer directly.
ringBuffer() - Method in class com.svenruppert.jsentinel.audit.DefaultCompositeAuditService: Exposed so a Vaadin /audit-route can read the ring buffer directly.
RingBufferAuditSink - Class in com.svenruppert.jsentinel.audit: Bounded in-memory ring buffer of AuditEvents.
RingBufferAuditSink() - Constructor for class com.svenruppert.jsentinel.audit.RingBufferAuditSink: Builds a ring buffer with RingBufferAuditSink.DEFAULT_CAPACITY slots.
RingBufferAuditSink(int) - Constructor for class com.svenruppert.jsentinel.audit.RingBufferAuditSink
role() - Method in record class com.svenruppert.jsentinel.audit.RoleAssigned: Returns the value of the role record component.
role() - Method in record class com.svenruppert.jsentinel.audit.RoleRevoked: Returns the value of the role record component.
role() - Method in record class com.svenruppert.jsentinel.audit.UserCreated: Returns the value of the role record component.
role(RoleName) - Method in class com.svenruppert.jsentinel.authorization.api.roles.StaticRoleHierarchy.Builder: Selects the parent role to register children for.
RoleAssigned - Record Class in com.svenruppert.jsentinel.audit: A role was assigned to a subject by an administrator action.
RoleAssigned(Instant, String, String, String) - Constructor for record class com.svenruppert.jsentinel.audit.RoleAssigned: Creates an instance of a RoleAssigned record class.
RoleAssignmentKey - Record Class in com.svenruppert.jsentinel.authorization.api.roles: Composite key under which RoleAssignmentStore tracks the set of roles assigned to a subject.
RoleAssignmentKey(TenantId, SubjectId) - Constructor for record class com.svenruppert.jsentinel.authorization.api.roles.RoleAssignmentKey: Validates the record components and normalises a null tenant to TenantId.DEFAULT.
RoleAssignmentStore - Interface in com.svenruppert.jsentinel.authorization.api.roles: Persists the role assignments of every subject, keyed on RoleAssignmentKey.
RoleBasedAccessEvaluator<T,U> - Class in com.svenruppert.jsentinel.authorization.api.roles: Base implementation for role-based access evaluation.
RoleBasedAccessEvaluator() - Constructor for class com.svenruppert.jsentinel.authorization.api.roles.RoleBasedAccessEvaluator: Creates a new instance.
RoleBasedAccessEvaluatorAPI<T,U> - Interface in com.svenruppert.jsentinel.authorization.api.roles: Contract for role-based access evaluators.
roleHierarchy() - Static method in class com.svenruppert.jsentinel.authorization.api.JSentinelServiceResolver: Returns the registered RoleHierarchy, or NoopRoleHierarchy.INSTANCE when none is configured.
RoleHierarchy - Interface in com.svenruppert.jsentinel.authorization.api.roles: Application-provided role inheritance graph.
RoleMatcher - Class in com.svenruppert.jsentinel.authorization.api.roles: Generic role matching helper.
roleName() - Method in record class com.svenruppert.jsentinel.authorization.api.roles.RoleName: Returns the value of the roleName record component.
RoleName - Record Class in com.svenruppert.jsentinel.authorization.api.roles: Wrapper for a role name string.
RoleName(String) - Constructor for record class com.svenruppert.jsentinel.authorization.api.roles.RoleName: Creates a role name.
roleNames() - Method in record class com.svenruppert.jsentinel.authorization.api.JSentinelSubject
roleNames() - Method in interface com.svenruppert.jsentinel.authorization.api.roles.HasRoles: Returns the role names assigned to the subject.
RolePermissionMapping - Interface in com.svenruppert.jsentinel.authorization.api.permissions: Application-provided mapping from roles to permissions.
RolePermissionResolver - Class in com.svenruppert.jsentinel.authorization.api.permissions: Merges role-to-permission lookups for a set of roles.
RoleRevoked - Record Class in com.svenruppert.jsentinel.audit: A role was revoked from a subject by an administrator action.
RoleRevoked(Instant, String, String, String) - Constructor for record class com.svenruppert.jsentinel.audit.RoleRevoked: Creates an instance of a RoleRevoked record class.
roles() - Method in record class com.svenruppert.jsentinel.authorization.api.JSentinelSubject: Returns the value of the roles record component.
rolesFor(U) - Method in interface com.svenruppert.jsentinel.authorization.api.AuthorizationService: Returns the roles assigned to the given subject.
rolesFor(U) - Method in class com.svenruppert.jsentinel.authorization.api.roles.StoreBackedRoleAuthorizationService
rotate(String) - Method in class com.svenruppert.jsentinel.authentication.TokenService: Rotates the supplied refresh token.
rotateSessionAfterLogin() - Method in record class com.svenruppert.jsentinel.session.TimeoutSessionPolicy.Config: Returns the value of the rotateSessionAfterLogin record component.
route() - Method in record class com.svenruppert.jsentinel.audit.AccessDenied: Returns the value of the route record component.
route() - Method in record class com.svenruppert.jsentinel.audit.AccessGranted: Returns the value of the route record component.
route() - Method in record class com.svenruppert.jsentinel.audit.SessionStale: Returns the value of the route record component.
route() - Method in record class com.svenruppert.jsentinel.audit.StepUpChallenged: Returns the value of the route record component.
runDummyKdf(char[], DummyVerificationContext) - Method in class com.svenruppert.jsentinel.credential.password.dummy.DefaultDummyVerificationService
runDummyKdf(char[], DummyVerificationContext) - Method in interface com.svenruppert.jsentinel.credential.password.dummy.DummyVerificationService: Executes a single dummy KDF against a stored dummy envelope built under the active policy.

S

SALT - Static variable in class com.svenruppert.jsentinel.credential.password.pbkdf2.Pbkdf2ParameterNames: Base64-encoded random salt.
SALT_LENGTH - Static variable in class com.svenruppert.jsentinel.credential.password.pbkdf2.Pbkdf2ParameterNames: Salt length in bytes, decimal integer; used by min/max bounds.
sameTenant(String) - Static method in class com.svenruppert.jsentinel.policy.api.JSentinelPolicies: Convenience variant of JSentinelPolicies.sameTenant(String, String, String) using the conventional key "tenantId" on both sides.
sameTenant(String, String, String) - Static method in class com.svenruppert.jsentinel.policy.api.JSentinelPolicies: Tenant-isolation pattern: subject and resource must carry the same tenantId attribute.
save(EmailVerificationTokenRecord) - Method in interface com.svenruppert.jsentinel.accountlifecycle.EmailVerificationTokenStore: Persists or replaces the supplied token record (keyed on EmailVerificationTokenRecord.tokenHash()).
save(EmailVerificationTokenRecord) - Method in class com.svenruppert.jsentinel.accountlifecycle.InMemoryEmailVerificationTokenStore
save(PasswordResetTokenRecord) - Method in class com.svenruppert.jsentinel.accountlifecycle.InMemoryPasswordResetTokenStore
save(PasswordResetTokenRecord) - Method in interface com.svenruppert.jsentinel.accountlifecycle.PasswordResetTokenStore: Persists or replaces the supplied token record (keyed on PasswordResetTokenRecord.tokenHash()).
save(ApiKeyRecord) - Method in interface com.svenruppert.jsentinel.authentication.ApiKeyStore: Persists or replaces the supplied record.
save(ApiKeyRecord) - Method in class com.svenruppert.jsentinel.authentication.InMemoryApiKeyStore
save(RefreshTokenRecord) - Method in class com.svenruppert.jsentinel.authentication.InMemoryRefreshTokenStore
save(RefreshTokenRecord) - Method in interface com.svenruppert.jsentinel.authentication.RefreshTokenStore: Persists or replaces the supplied record.
save(RememberMeTokenRecord) - Method in class com.svenruppert.jsentinel.authentication.InMemoryRememberMeTokenStore
save(RememberMeTokenRecord) - Method in interface com.svenruppert.jsentinel.authentication.RememberMeTokenStore: Persists or replaces the supplied token record (keyed on RememberMeTokenRecord.tokenHash()).
save(BootstrapState) - Method in interface com.svenruppert.jsentinel.bootstrap.BootstrapStateStore: Persists or replaces the bootstrap state.
save(BootstrapState) - Method in class com.svenruppert.jsentinel.bootstrap.InMemoryBootstrapStateStore
save(BootstrapToken) - Method in interface com.svenruppert.jsentinel.bootstrap.BootstrapTokenStore
save(BootstrapToken) - Method in class com.svenruppert.jsentinel.bootstrap.FileBootstrapTokenStore
save(BootstrapToken) - Method in class com.svenruppert.jsentinel.bootstrap.InMemoryBootstrapTokenStore
save(CalibrationProfile, Path) - Method in class com.svenruppert.jsentinel.credential.password.calibration.CalibrationProfileStore: Serialises the profile to the given path.
save(ResetTokenRecord) - Method in class com.svenruppert.jsentinel.credential.reset.InMemoryResetTokenStore
save(ResetTokenRecord) - Method in interface com.svenruppert.jsentinel.credential.reset.ResetTokenStore: Inserts a freshly issued token.
save(SessionRecord) - Method in class com.svenruppert.jsentinel.session.InMemorySessionStore
save(SessionRecord) - Method in interface com.svenruppert.jsentinel.session.SessionStore: Persists or replaces the supplied session record.
scan(Class) - Method in class com.svenruppert.jsentinel.authorization.impl.JSentinelAnnotationScanner: Scans the given class for a restriction annotation and returns the annotation together with the evaluator class declared via JSentinelAnnotation.
scan(AnnotatedElement) - Method in class com.svenruppert.jsentinel.authorization.impl.JSentinelAnnotationScanner: Scans the given annotated element for a restriction annotation and returns the annotation together with the evaluator class declared via JSentinelAnnotation.
scan(Method) - Method in class com.svenruppert.jsentinel.authorization.impl.JSentinelAnnotationScanner: Scans the given method for a restriction annotation and returns the annotation together with the evaluator class declared via JSentinelAnnotation.
scope() - Method in record class com.svenruppert.jsentinel.audit.LogoutPerformed: Returns the value of the scope record component.
scope() - Method in record class com.svenruppert.jsentinel.audit.RateLimitExceeded: Returns the value of the scope record component.
scope() - Method in record class com.svenruppert.jsentinel.ratelimiting.RateLimitKey: Returns the value of the scope record component.
scopes() - Method in record class com.svenruppert.jsentinel.authentication.ApiKeyRecord: Returns the value of the scopes record component.
SecretValue - Class in com.svenruppert.jsentinel.credential.secret: Short-lived container for password / pepper / token material.
Secured - Annotation Interface in com.svenruppert.jsentinel.authorization.annotations: Compile-time trigger for the security-processor annotation processor.
SecuredOperationDescriptor - Record Class in com.svenruppert.jsentinel.authorization.api.operations: Adapter-neutral description of a secured operation.
SecuredOperationDescriptor(String, String, String, String, String, String, Set, Set, Map) - Constructor for record class com.svenruppert.jsentinel.authorization.api.operations.SecuredOperationDescriptor: Creates an instance of a SecuredOperationDescriptor record class.
SecuredOperationRegistry - Class in com.svenruppert.jsentinel.authorization.api.operations: Registry of SecuredOperationDescriptors, looked up by id.
SecuredOperationRegistry() - Constructor for class com.svenruppert.jsentinel.authorization.api.operations.SecuredOperationRegistry
securityAuditService() - Static method in class com.svenruppert.jsentinel.authorization.api.JSentinelServiceResolver: Returns the registered JSentinelAuditService, or NoopJSentinelAuditService.INSTANCE if no SPI implementation is registered.
securityVersionAtLogin() - Method in record class com.svenruppert.jsentinel.session.SessionRecord: Returns the value of the securityVersionAtLogin record component.
selector() - Method in record class com.svenruppert.jsentinel.credential.reset.ResetTokenRecord
selector() - Method in record class com.svenruppert.jsentinel.credential.token.SelectorVerifierToken: Returns the value of the selector record component.
selector() - Method in record class com.svenruppert.jsentinel.credential.token.TokenDigestRecord: Returns the value of the selector record component.
SelectorMismatch() - Constructor for record class com.svenruppert.jsentinel.credential.token.TokenVerificationResult.SelectorMismatch: Creates an instance of a SelectorMismatch record class.
SelectorVerifierToken - Record Class in com.svenruppert.jsentinel.credential.token: Two-part token used for password-reset, email-verification and remember-me flows.
SelectorVerifierToken(String, SecretValue) - Constructor for record class com.svenruppert.jsentinel.credential.token.SelectorVerifierToken: Creates an instance of a SelectorVerifierToken record class.
SemaphoreKdfExecutionLimiter - Class in com.svenruppert.jsentinel.credential.password.limiter: KdfExecutionLimiter backed by a fair Semaphore.
SemaphoreKdfExecutionLimiter(KdfResourceBudget) - Constructor for class com.svenruppert.jsentinel.credential.password.limiter.SemaphoreKdfExecutionLimiter
send(JSentinelNotification) - Method in interface com.svenruppert.jsentinel.accountlifecycle.JSentinelNotificationSender: Dispatches the notification.
send(JSentinelNotification) - Method in class com.svenruppert.jsentinel.accountlifecycle.LoggingNotificationSender
serialize(PasswordHash) - Method in interface com.svenruppert.jsentinel.authentication.PasswordHasher: Inverse of PasswordHasher.parse(String).
serialize(PasswordHash) - Method in class com.svenruppert.jsentinel.authentication.Pbkdf2PasswordHasher
service() - Element in annotation interface com.svenruppert.jsentinel.annotations.PropagateToken: Logical service name for diagnostics / audit metadata.
SessionContext - Record Class in com.svenruppert.jsentinel.session: Adapter-neutral session view for the SessionPolicy.
SessionContext(U, String, Instant, Instant, String, Map) - Constructor for record class com.svenruppert.jsentinel.session.SessionContext: Creates an instance of a SessionContext record class.
SessionCreated - Record Class in com.svenruppert.jsentinel.audit: A new session was opened for a subject (typically after successful login).
SessionCreated(Instant, String, String) - Constructor for record class com.svenruppert.jsentinel.audit.SessionCreated: Creates an instance of a SessionCreated record class.
sessionDecision() - Method in record class com.svenruppert.jsentinel.credential.change.PasswordChangeResult.Succeeded: Returns the value of the sessionDecision record component.
SessionDecision - Interface in com.svenruppert.jsentinel.session: Outcome of a SessionPolicy.beforeNavigation(SessionContext) decision.
SessionDecision.Continue - Record Class in com.svenruppert.jsentinel.session: The navigation may proceed unchanged.
SessionDecision.Invalidate - Record Class in com.svenruppert.jsentinel.session: The session must be invalidated.
SessionDecision.RequireLogin - Record Class in com.svenruppert.jsentinel.session: The subject must re-authenticate.
SessionExpired - Record Class in com.svenruppert.jsentinel.audit: A session was ended by the policy because it crossed an inactivity or absolute-lifetime threshold.
SessionExpired(Instant, String, String, String) - Constructor for record class com.svenruppert.jsentinel.audit.SessionExpired: Creates an instance of a SessionExpired record class.
SessionHandlingDecision - Enum Class in com.svenruppert.jsentinel.credential.change: Adapter-neutral instruction returned after a successful password change.
sessionId() - Method in record class com.svenruppert.jsentinel.audit.LoginSucceeded: Returns the value of the sessionId record component.
sessionId() - Method in record class com.svenruppert.jsentinel.audit.LogoutPerformed: Returns the value of the sessionId record component.
sessionId() - Method in record class com.svenruppert.jsentinel.audit.SessionCreated: Returns the value of the sessionId record component.
sessionId() - Method in record class com.svenruppert.jsentinel.audit.SessionExpired: Returns the value of the sessionId record component.
sessionId() - Method in record class com.svenruppert.jsentinel.audit.SessionInvalidated: Returns the value of the sessionId record component.
sessionId() - Method in record class com.svenruppert.jsentinel.audit.SessionStale: Returns the value of the sessionId record component.
sessionId() - Method in record class com.svenruppert.jsentinel.bruteforce.LoginAttemptContext: Returns the value of the sessionId record component.
sessionId() - Method in record class com.svenruppert.jsentinel.session.SessionContext: Returns the value of the sessionId record component.
sessionId() - Method in record class com.svenruppert.jsentinel.session.SessionRecord: Returns the value of the sessionId record component.
SessionId - Record Class in com.svenruppert.jsentinel.session: Strongly-typed identifier of an authenticated session.
SessionId(String) - Constructor for record class com.svenruppert.jsentinel.session.SessionId: Validates the record component.
SessionInvalidated - Record Class in com.svenruppert.jsentinel.audit: A session was forcibly invalidated by application or framework code (rotation after login, role change, password reset, admin action).
SessionInvalidated(Instant, String, String, String) - Constructor for record class com.svenruppert.jsentinel.audit.SessionInvalidated: Creates an instance of a SessionInvalidated record class.
SessionMetadata - Record Class in com.svenruppert.jsentinel.session: Adapter-neutral query input for SessionPolicy.evaluate(SessionMetadata).
SessionMetadata(String, Instant, Instant) - Constructor for record class com.svenruppert.jsentinel.session.SessionMetadata: Creates an instance of a SessionMetadata record class.
sessionPolicy() - Static method in class com.svenruppert.jsentinel.authorization.api.JSentinelServiceResolver: Returns the registered SessionPolicy, or NoopSessionPolicy.instance() if no SPI implementation is configured.
SessionPolicy - Interface in com.svenruppert.jsentinel.session: Pluggable session policy.
SessionPolicyDecision - Interface in com.svenruppert.jsentinel.session: Outcome of SessionPolicy.evaluate(SessionMetadata).
SessionPolicyDecision.AbsoluteLifetimeExceeded - Record Class in com.svenruppert.jsentinel.session: The session is older than the configured absolute lifetime.
SessionPolicyDecision.Active - Record Class in com.svenruppert.jsentinel.session: The session may continue.
SessionPolicyDecision.IdleTimeout - Record Class in com.svenruppert.jsentinel.session: The session was idle longer than the configured idle timeout.
SessionRecord - Record Class in com.svenruppert.jsentinel.session: Persistent representation of a single authenticated session.
SessionRecord(SessionId, SubjectId, TenantId, Instant, Instant, JSentinelVersion, SessionStatus) - Constructor for record class com.svenruppert.jsentinel.session.SessionRecord: Validates the record components and normalises a null tenant to TenantId.DEFAULT.
sessionsOf(SubjectId) - Method in class com.svenruppert.jsentinel.logout.InMemorySubjectSessionRegistry
sessionsOf(SubjectId) - Method in class com.svenruppert.jsentinel.logout.StoreBackedSubjectSessionRegistry
sessionsOf(SubjectId) - Method in interface com.svenruppert.jsentinel.logout.SubjectSessionRegistry: Returns every session id currently associated with subjectId.
SessionStale - Record Class in com.svenruppert.jsentinel.audit: Emitted when a request was refused because the session's security-version snapshot no longer matches the subject's current version.
SessionStale(JSentinelVersionStatus.Drifted) - Constructor for record class com.svenruppert.jsentinel.session.JSentinelVersionEnforcer.EnforcementOutcome.SessionStale: Validates the component.
SessionStale(Instant, String, String, String, long, long) - Constructor for record class com.svenruppert.jsentinel.audit.SessionStale: Validates the record components.
SessionStatus - Enum Class in com.svenruppert.jsentinel.session: Lifecycle state of a SessionRecord.
SessionStore - Interface in com.svenruppert.jsentinel.session: Store for SessionRecords, keyed on SessionId.
setActionAuthorizationService(ActionAuthorizationService) - Static method in class com.svenruppert.jsentinel.authorization.api.JSentinelServiceResolver: Replaces the cached ActionAuthorizationService.
setAuthenticationService(AuthenticationService) - Static method in class com.svenruppert.jsentinel.authorization.api.JSentinelServiceResolver: Overrides the cached AuthenticationService.
setAuthorizationService(AuthorizationService) - Static method in class com.svenruppert.jsentinel.authorization.api.JSentinelServiceResolver: Overrides the cached AuthorizationService.
setCurrentSubject(T, Class) - Method in interface com.svenruppert.jsentinel.authorization.api.SubjectStore: Stores the given subject as the current subject.
setJSentinelAuditService(JSentinelAuditService) - Static method in class com.svenruppert.jsentinel.authorization.api.JSentinelServiceResolver: Replaces the cached JSentinelAuditService.
setJSentinelVersionStore(JSentinelVersionStore) - Static method in class com.svenruppert.jsentinel.authorization.api.JSentinelServiceResolver: Replaces the cached JSentinelVersionStore.
setLoginAttemptPolicy(LoginAttemptPolicy) - Static method in class com.svenruppert.jsentinel.authorization.api.JSentinelServiceResolver: Replaces the cached LoginAttemptPolicy.
setLogoutService(LogoutService) - Static method in class com.svenruppert.jsentinel.authorization.api.JSentinelServiceResolver: Replaces the cached LogoutService.
setPasswordHashingService(PasswordHasher) - Static method in class com.svenruppert.jsentinel.authorization.api.JSentinelServiceResolver: Replaces the cached PasswordHasher.
setPolicyRegistry(PolicyRegistry) - Static method in class com.svenruppert.jsentinel.authorization.api.JSentinelServiceResolver: Replaces the cached PolicyRegistry.
setResourceResolverRegistry(ResourceResolverRegistry) - Static method in class com.svenruppert.jsentinel.authorization.api.JSentinelServiceResolver: Replaces the cached ResourceResolverRegistry.
setRoleHierarchy(RoleHierarchy) - Static method in class com.svenruppert.jsentinel.authorization.api.JSentinelServiceResolver: Replaces the cached RoleHierarchy.
setRoles(RoleAssignmentKey, Set) - Method in class com.svenruppert.jsentinel.authorization.api.roles.InMemoryRoleAssignmentStore
setRoles(RoleAssignmentKey, Set) - Method in interface com.svenruppert.jsentinel.authorization.api.roles.RoleAssignmentStore: Replaces the role set for key with roles.
setSessionPolicy(SessionPolicy) - Static method in class com.svenruppert.jsentinel.authorization.api.JSentinelServiceResolver: Replaces the cached SessionPolicy.
setStepUpRouteName(String) - Static method in class com.svenruppert.jsentinel.authorization.api.JSentinelServiceResolver: Overrides the step-up route name.
setSubjectIdResolver(SubjectIdResolver) - Static method in class com.svenruppert.jsentinel.authorization.api.JSentinelServiceResolver: Replaces the cached SubjectIdResolver.
setSubjectStore(SubjectStore) - Static method in class com.svenruppert.jsentinel.authorization.api.SubjectStores: Replaces the active store.
setTokenCredentialStore(TokenCredentialStore) - Static method in class com.svenruppert.jsentinel.authorization.api.JSentinelServiceResolver: V00.74 — explicitly install a TokenCredentialStore.
SINGLE_TENANT_DEFAULT - Static variable in record class com.svenruppert.jsentinel.credential.tenant.TenantCredentialContext: Default value for tenant-unaware code paths and single-tenant deployments.
singleTenant(Optional) - Static method in class com.svenruppert.jsentinel.credential.tenant.DefaultTenantAwarePepperReferenceResolver: Single-tenant convenience: every tenant resolves to the same (possibly empty) reference.
size() - Method in class com.svenruppert.jsentinel.audit.InMemoryAuditEventStore: Returns the current store size (across every tenant).
size() - Method in class com.svenruppert.jsentinel.audit.RingBufferAuditSink: Returns the current number of retained events.
size() - Method in class com.svenruppert.jsentinel.credential.reset.InMemoryResetTokenStore: Test helper: number of stored tokens.
size() - Method in class com.svenruppert.jsentinel.credential.store.InMemoryCredentialStore: Test/demo helper: number of records currently held.
size(String) - Method in class com.svenruppert.jsentinel.credential.history.InMemoryPasswordHistoryStore: Test helper: size of one user's history.
snapshot() - Method in class com.svenruppert.jsentinel.authorization.api.operations.SecuredOperationRegistry: Test seam — returns the registered map snapshot.
snapshot() - Method in record class com.svenruppert.jsentinel.session.JSentinelVersionStatus.Current
snapshot() - Method in record class com.svenruppert.jsentinel.session.JSentinelVersionStatus.Drifted: Returns the value of the snapshot record component.
snapshot() - Method in interface com.svenruppert.jsentinel.session.JSentinelVersionStatus
snapshotCardinalities() - Method in class com.svenruppert.jsentinel.credential.abuse.AbusePatternMonitor: Snapshot of internal state for diagnostics.
snapshotVersion() - Method in record class com.svenruppert.jsentinel.audit.SessionStale: Returns the value of the snapshotVersion record component.
Sources, in order of precedence - Section in class com.svenruppert.jsentinel.bootstrap.BootstrapConfigurationLoader
Sources, in order of precedence - Section in class com.svenruppert.jsentinel.bruteforce.LoginAttemptConfigurationLoader
sprayingDistinctUsers() - Method in record class com.svenruppert.jsentinel.credential.abuse.AbusePatternMonitor.Config: Returns the value of the sprayingDistinctUsers record component.
sprayingWindow() - Method in record class com.svenruppert.jsentinel.credential.abuse.AbusePatternMonitor.Config: Returns the value of the sprayingWindow record component.
stale() - Method in record class com.svenruppert.jsentinel.credential.emergency.MassCredentialStatusChange.Report: Returns the value of the stale record component.
Stale() - Constructor for record class com.svenruppert.jsentinel.credential.reset.ResetTokenUpdateResult.Stale: Creates an instance of a Stale record class.
Stale() - Constructor for record class com.svenruppert.jsentinel.credential.store.CredentialUpdateResult.Stale: Creates an instance of a Stale record class.
state() - Method in class com.svenruppert.jsentinel.bootstrap.StoreBackedBootstrapStateService: Returns the persisted bootstrap state for the configured tenant.
StaticActionAuthorizationService - Class in com.svenruppert.jsentinel.action: Default ActionAuthorizationService that checks an ActionPermission against the subject's permission set obtained via the configured AuthorizationService.
StaticActionAuthorizationService(AuthorizationService, JSentinelAuditService) - Constructor for class com.svenruppert.jsentinel.action.StaticActionAuthorizationService
StaticActionAuthorizationService(Class) - Constructor for class com.svenruppert.jsentinel.action.StaticActionAuthorizationService: Builds a service that resolves the AuthorizationService via JSentinelServiceResolver.
StaticRoleHierarchy - Class in com.svenruppert.jsentinel.authorization.api.roles: Immutable, programmatically-built RoleHierarchy.
StaticRoleHierarchy.Builder - Class in com.svenruppert.jsentinel.authorization.api.roles: Fluent builder for StaticRoleHierarchy.
StaticRolePermissionMapping - Class in com.svenruppert.jsentinel.authorization.api.permissions: Static, immutable RolePermissionMapping.
StaticRolePermissionMapping(Map) - Constructor for class com.svenruppert.jsentinel.authorization.api.permissions.StaticRolePermissionMapping
StaticRolePermissionMapping.Builder - Class in com.svenruppert.jsentinel.authorization.api.permissions
status() - Method in record class com.svenruppert.jsentinel.credential.reset.ResetTokenRecord: Returns the value of the status record component.
status() - Method in record class com.svenruppert.jsentinel.credential.store.CredentialRecord: Returns the value of the status record component.
status() - Method in record class com.svenruppert.jsentinel.session.JSentinelVersionEnforcer.EnforcementOutcome.SessionStale: Returns the value of the status record component.
status() - Method in record class com.svenruppert.jsentinel.session.SessionRecord: Returns the value of the status record component.
STEP_UP_REASON_PREFIX - Static variable in class com.svenruppert.jsentinel.policy.api.PolicyDecisions: Deprecated.
since PR-9 — switch on AuthorizationDecision.StepUpRequired instead of parsing the Forbidden reason string.
stepUpAt() - Method in record class com.svenruppert.jsentinel.credential.abuse.AbuseLimitsPolicy.Limit: Returns the value of the stepUpAt record component.
StepUpChallenged - Record Class in com.svenruppert.jsentinel.audit: An adapter challenged the subject for a step-up authentication — either via an HTTP 401 + WWW-Authenticate response (REST) or by rerouting to a configured step-up route (Vaadin).
StepUpChallenged(Instant, String, String, String, String) - Constructor for record class com.svenruppert.jsentinel.audit.StepUpChallenged: Creates an instance of a StepUpChallenged record class.
stepUpRequired(String, PolicyDecision.StepUpMethod) - Static method in interface com.svenruppert.jsentinel.policy.api.PolicyDecision: Creates a PolicyDecision.StepUpRequired decision.
stepUpRequired(String, String) - Static method in interface com.svenruppert.jsentinel.authorization.api.AuthorizationDecision: Creates a step-up-required decision.
StepUpRequired(String, PolicyDecision.StepUpMethod) - Constructor for record class com.svenruppert.jsentinel.policy.api.PolicyDecision.StepUpRequired: Creates an instance of a StepUpRequired record class.
StepUpRequired(String, String) - Constructor for record class com.svenruppert.jsentinel.authorization.api.AuthorizationDecision.StepUpRequired: Creates an instance of a StepUpRequired record class.
stepUpRequiredIf(Predicate, PolicyDecision.StepUpMethod, String) - Method in class com.svenruppert.jsentinel.policy.api.PolicyBuilder: Adds a step-up rule.
stepUpRouteName() - Static method in class com.svenruppert.jsentinel.authorization.api.JSentinelServiceResolver: Returns the route name a Vaadin adapter reroutes to when a AuthorizationDecision.StepUpRequired is mapped.
StoreBackedBootstrapStateService - Class in com.svenruppert.jsentinel.bootstrap: Bootstrap-state service backed by a BootstrapStateStore.
StoreBackedBootstrapStateService(BootstrapStateStore) - Constructor for class com.svenruppert.jsentinel.bootstrap.StoreBackedBootstrapStateService: Convenience constructor: binds to TenantId.DEFAULT, BootstrapMode.TRANSIENT_CONSOLE and the system clock.
StoreBackedBootstrapStateService(BootstrapStateStore, TenantId, BootstrapMode, Clock) - Constructor for class com.svenruppert.jsentinel.bootstrap.StoreBackedBootstrapStateService: Full constructor.
StoreBackedJSentinelAuditService - Class in com.svenruppert.jsentinel.audit: JSentinelAuditService that persists events through an AuditEventStore (Phase 2).
StoreBackedJSentinelAuditService(AuditEventStore) - Constructor for class com.svenruppert.jsentinel.audit.StoreBackedJSentinelAuditService: Builds a service that operates against TenantId.DEFAULT.
StoreBackedJSentinelAuditService(AuditEventStore, TenantId) - Constructor for class com.svenruppert.jsentinel.audit.StoreBackedJSentinelAuditService: Builds a service that operates against the supplied tenant.
StoreBackedLoginAttemptPolicy - Class in com.svenruppert.jsentinel.bruteforce: LoginAttemptPolicy that stores its failure counters in a LoginAttemptStore.
StoreBackedLoginAttemptPolicy(LoginAttemptStore) - Constructor for class com.svenruppert.jsentinel.bruteforce.StoreBackedLoginAttemptPolicy: Builds a policy with LoginAttemptConfiguration.defaults() and TenantId.DEFAULT.
StoreBackedLoginAttemptPolicy(LoginAttemptStore, LoginAttemptConfiguration, TenantId, Clock) - Constructor for class com.svenruppert.jsentinel.bruteforce.StoreBackedLoginAttemptPolicy: Full constructor.
StoreBackedRememberMeService - Class in com.svenruppert.jsentinel.authentication: "Remember me" / persistent-login service built on top of a RememberMeTokenStore and a PasswordHasher.
StoreBackedRememberMeService(RememberMeTokenStore, PasswordHasher) - Constructor for class com.svenruppert.jsentinel.authentication.StoreBackedRememberMeService: Convenience constructor: binds to TenantId.DEFAULT, uses a system Clock and the default 256-bit token source.
StoreBackedRememberMeService(RememberMeTokenStore, PasswordHasher, TenantId, Clock, Supplier) - Constructor for class com.svenruppert.jsentinel.authentication.StoreBackedRememberMeService: Full constructor.
StoreBackedRememberMeService.IssuedToken - Record Class in com.svenruppert.jsentinel.authentication: Tuple returned from StoreBackedRememberMeService.issue(SubjectId, Duration): the plain token (caller passes it to the client carrier and drops it) and the persisted record (handy for tests / audit hooks).
StoreBackedRoleAuthorizationService - Class in com.svenruppert.jsentinel.authorization.api.roles: AuthorizationService that looks roles up in a RoleAssignmentStore.
StoreBackedRoleAuthorizationService(RoleAssignmentStore, Function) - Constructor for class com.svenruppert.jsentinel.authorization.api.roles.StoreBackedRoleAuthorizationService: Single-tenant constructor.
StoreBackedRoleAuthorizationService(RoleAssignmentStore, Function, Function) - Constructor for class com.svenruppert.jsentinel.authorization.api.roles.StoreBackedRoleAuthorizationService: Multi-tenant constructor.
StoreBackedSubjectSessionRegistry - Class in com.svenruppert.jsentinel.logout: SubjectSessionRegistry that stores its (subject, sessionId) associations as full SessionRecords in a SessionStore.
StoreBackedSubjectSessionRegistry(SessionStore) - Constructor for class com.svenruppert.jsentinel.logout.StoreBackedSubjectSessionRegistry: Builds a registry bound to TenantId.DEFAULT using a system clock and no version-store integration — every new session is recorded with JSentinelVersion.INITIAL.
StoreBackedSubjectSessionRegistry(SessionStore, TenantId, Clock) - Constructor for class com.svenruppert.jsentinel.logout.StoreBackedSubjectSessionRegistry: Version-store-free constructor.
StoreBackedSubjectSessionRegistry(SessionStore, TenantId, Clock, JSentinelVersionStore) - Constructor for class com.svenruppert.jsentinel.logout.StoreBackedSubjectSessionRegistry: Full constructor.
strategy() - Element in annotation interface com.svenruppert.jsentinel.annotations.PropagateToken: Lookup key against the named strategies.
strict() - Static method in record class com.svenruppert.jsentinel.credential.standards.FipsProfile: Strict default: only FIPS-acceptable algorithms are allowed.
strictBootstrap() - Static method in record class com.svenruppert.jsentinel.bruteforce.LoginAttemptConfiguration: Strict defaults intended for the bootstrap-admin endpoint: 3 failures / 1 h window / 1 h initial lockout / 24 h cap.
strictMode() - Method in record class com.svenruppert.jsentinel.credential.standards.FipsProfile: Returns the value of the strictMode record component.
stuffingDistinctClients() - Method in record class com.svenruppert.jsentinel.credential.abuse.AbusePatternMonitor.Config: Returns the value of the stuffingDistinctClients record component.
stuffingWindow() - Method in record class com.svenruppert.jsentinel.credential.abuse.AbusePatternMonitor.Config: Returns the value of the stuffingWindow record component.
subject() - Method in record class com.svenruppert.jsentinel.authorization.navigation.AccessContext: Returns the value of the subject record component.
subject() - Method in record class com.svenruppert.jsentinel.policy.api.PolicyContext: Shortcut to the authenticated subject of the wrapped access context.
subject() - Method in record class com.svenruppert.jsentinel.policy.api.ResourceAccessContext: Shortcut to the authenticated subject of the wrapped access context.
subject() - Method in record class com.svenruppert.jsentinel.session.SessionContext: Returns the value of the subject record component.
subjectAvailable() - Method in record class com.svenruppert.jsentinel.authorization.navigation.NavigationJSentinelContext: Returns the value of the subjectAvailable record component.
SubjectClearingLogoutService - Class in com.svenruppert.jsentinel.logout: Adapter-neutral default LogoutService implementation.
SubjectClearingLogoutService(SubjectStore, Class) - Constructor for class com.svenruppert.jsentinel.logout.SubjectClearingLogoutService: Constructs a logout service that only clears the subject store; uses SubjectSessionRegistry no-op behaviour.
SubjectClearingLogoutService(SubjectStore, Class, SubjectSessionRegistry, JSentinelAuditService) - Constructor for class com.svenruppert.jsentinel.logout.SubjectClearingLogoutService
subjectId() - Method in record class com.svenruppert.jsentinel.accountlifecycle.EmailVerificationTokenRecord: Returns the value of the subjectId record component.
subjectId() - Method in record class com.svenruppert.jsentinel.accountlifecycle.JSentinelNotification: Returns the value of the subjectId record component.
subjectId() - Method in record class com.svenruppert.jsentinel.accountlifecycle.PasswordResetTokenRecord: Returns the value of the subjectId record component.
subjectId() - Method in record class com.svenruppert.jsentinel.audit.AccessDenied: Returns the value of the subjectId record component.
subjectId() - Method in record class com.svenruppert.jsentinel.audit.AccessGranted: Returns the value of the subjectId record component.
subjectId() - Method in record class com.svenruppert.jsentinel.audit.ActionDenied: Returns the value of the subjectId record component.
subjectId() - Method in record class com.svenruppert.jsentinel.audit.ApiKeyDenied: Returns the value of the subjectId record component.
subjectId() - Method in record class com.svenruppert.jsentinel.audit.ApiKeyUsed: Returns the value of the subjectId record component.
subjectId() - Method in record class com.svenruppert.jsentinel.audit.AuditQuery: Returns the value of the subjectId record component.
subjectId() - Method in record class com.svenruppert.jsentinel.audit.EmailVerificationRequested: Returns the value of the subjectId record component.
subjectId() - Method in record class com.svenruppert.jsentinel.audit.EmailVerified: Returns the value of the subjectId record component.
subjectId() - Method in record class com.svenruppert.jsentinel.audit.LogoutPerformed: Returns the value of the subjectId record component.
subjectId() - Method in record class com.svenruppert.jsentinel.audit.PasswordResetCompleted: Returns the value of the subjectId record component.
subjectId() - Method in record class com.svenruppert.jsentinel.audit.PasswordResetRequested: Returns the value of the subjectId record component.
subjectId() - Method in record class com.svenruppert.jsentinel.audit.PolicyEvaluated: Returns the value of the subjectId record component.
subjectId() - Method in record class com.svenruppert.jsentinel.audit.RateLimitExceeded: Returns the value of the subjectId record component.
subjectId() - Method in record class com.svenruppert.jsentinel.audit.RoleAssigned: Returns the value of the subjectId record component.
subjectId() - Method in record class com.svenruppert.jsentinel.audit.RoleRevoked: Returns the value of the subjectId record component.
subjectId() - Method in record class com.svenruppert.jsentinel.audit.SessionCreated: Returns the value of the subjectId record component.
subjectId() - Method in record class com.svenruppert.jsentinel.audit.SessionExpired: Returns the value of the subjectId record component.
subjectId() - Method in record class com.svenruppert.jsentinel.audit.SessionInvalidated: Returns the value of the subjectId record component.
subjectId() - Method in record class com.svenruppert.jsentinel.audit.SessionStale: Returns the value of the subjectId record component.
subjectId() - Method in record class com.svenruppert.jsentinel.audit.StepUpChallenged: Returns the value of the subjectId record component.
subjectId() - Method in record class com.svenruppert.jsentinel.audit.TokenRotated: Returns the value of the subjectId record component.
subjectId() - Method in record class com.svenruppert.jsentinel.authentication.ApiKeyRecord: Returns the value of the subjectId record component.
subjectId() - Method in record class com.svenruppert.jsentinel.authentication.RefreshTokenRecord: Returns the value of the subjectId record component.
subjectId() - Method in record class com.svenruppert.jsentinel.authentication.RememberMeTokenRecord: Returns the value of the subjectId record component.
subjectId() - Method in record class com.svenruppert.jsentinel.authentication.TokenService.TokenPair: Returns the value of the subjectId record component.
subjectId() - Method in record class com.svenruppert.jsentinel.authorization.api.JSentinelSubject: Returns the value of the subjectId record component.
subjectId() - Method in record class com.svenruppert.jsentinel.authorization.api.roles.RoleAssignmentKey: Returns the value of the subjectId record component.
subjectId() - Method in record class com.svenruppert.jsentinel.session.JSentinelVersionKey: Returns the value of the subjectId record component.
subjectId() - Method in record class com.svenruppert.jsentinel.session.SessionMetadata: Returns the value of the subjectId record component.
subjectId() - Method in record class com.svenruppert.jsentinel.session.SessionRecord: Returns the value of the subjectId record component.
SubjectId - Record Class in com.svenruppert.jsentinel.logout: Strongly-typed wrapper around the application's stable subject identifier.
SubjectId(String) - Constructor for record class com.svenruppert.jsentinel.logout.SubjectId: Creates an instance of a SubjectId record class.
SubjectIdResolver - Interface in com.svenruppert.jsentinel.authorization.api: Maps an application's typed subject U to the adapter-neutral SubjectId (and optionally to a TenantId).
SubjectPredicates - Class in com.svenruppert.jsentinel.policy.api: Predicate factories that branch on the JSentinelSubject carried by a PolicyContext.
SubjectSessionRegistry - Interface in com.svenruppert.jsentinel.logout: Tracks active sessions per SubjectId.
subjectStore() - Static method in class com.svenruppert.jsentinel.authorization.api.SubjectStores: Returns the registered SubjectStore.
SubjectStore - Interface in com.svenruppert.jsentinel.authorization.api: Abstraction for storing and retrieving the current security subject (user).
SubjectStores - Class in com.svenruppert.jsentinel.authorization.api: Resolver for the active SubjectStore.
subjectType() - Method in interface com.svenruppert.jsentinel.authentication.AuthenticationService: Returns the class token for the subject type.
Succeeded() - Constructor for record class com.svenruppert.jsentinel.credential.reset.PasswordResetConsumeResult.Succeeded: Creates an instance of a Succeeded record class.
Succeeded(SessionHandlingDecision) - Constructor for record class com.svenruppert.jsentinel.credential.change.PasswordChangeResult.Succeeded: Creates an instance of a Succeeded record class.
SUCCESS - Enum constant in enum class com.svenruppert.jsentinel.credential.abuse.AttemptOutcome
supports(String, String) - Method in interface com.svenruppert.jsentinel.credential.password.provider.PasswordHashProvider: Returns whether this provider can serve the given combination.

T

target() - Method in record class com.svenruppert.jsentinel.authorization.navigation.AccessContext: Compatibility accessor for the former target component.
target() - Method in record class com.svenruppert.jsentinel.authorization.navigation.AccessDecision.Reroute: Returns the value of the target record component.
target() - Method in record class com.svenruppert.jsentinel.authorization.navigation.AccessDecision.RerouteWithParameter: Returns the value of the target record component.
target() - Method in record class com.svenruppert.jsentinel.authorization.navigation.AccessDecision.RerouteWithParameters: Returns the value of the target record component.
targetMillis() - Method in record class com.svenruppert.jsentinel.credential.password.calibration.CalibrationProfile: Returns the value of the targetMillis record component.
targetPolicyVersion() - Method in record class com.svenruppert.jsentinel.audit.CredentialRehashed: Returns the value of the targetPolicyVersion record component.
targetPolicyVersion() - Method in record class com.svenruppert.jsentinel.credential.password.RehashDecision.Required: Returns the value of the targetPolicyVersion record component.
targetServiceName() - Method in record class com.svenruppert.jsentinel.credential.propagation.OutboundCall: Returns the value of the targetServiceName record component.
TEMPORARILY_UNAVAILABLE - Enum constant in enum class com.svenruppert.jsentinel.credential.PublicFailureType
tenant() - Method in record class com.svenruppert.jsentinel.accountlifecycle.EmailVerificationTokenRecord: Returns the value of the tenant record component.
tenant() - Method in record class com.svenruppert.jsentinel.accountlifecycle.JSentinelNotification: Returns the value of the tenant record component.
tenant() - Method in record class com.svenruppert.jsentinel.accountlifecycle.PasswordResetTokenRecord: Returns the value of the tenant record component.
tenant() - Method in record class com.svenruppert.jsentinel.audit.AuditEnvelope: Returns the value of the tenant record component.
tenant() - Method in class com.svenruppert.jsentinel.audit.StoreBackedJSentinelAuditService: Returns the tenant this service is bound to.
tenant() - Method in record class com.svenruppert.jsentinel.authentication.ApiKeyRecord: Returns the value of the tenant record component.
tenant() - Method in record class com.svenruppert.jsentinel.authentication.RefreshTokenRecord: Returns the value of the tenant record component.
tenant() - Method in record class com.svenruppert.jsentinel.authentication.RememberMeTokenRecord: Returns the value of the tenant record component.
tenant() - Method in record class com.svenruppert.jsentinel.authorization.api.roles.RoleAssignmentKey: Returns the value of the tenant record component.
tenant() - Method in record class com.svenruppert.jsentinel.bootstrap.BootstrapState: Returns the value of the tenant record component.
tenant() - Method in class com.svenruppert.jsentinel.bootstrap.StoreBackedBootstrapStateService
tenant() - Method in record class com.svenruppert.jsentinel.bruteforce.LoginAttemptKey: Returns the value of the tenant record component.
tenant() - Method in record class com.svenruppert.jsentinel.credential.abuse.AbuseAttemptContext: Returns the value of the tenant record component.
tenant() - Method in record class com.svenruppert.jsentinel.credential.input.PasswordContext: Returns the value of the tenant record component.
tenant() - Method in record class com.svenruppert.jsentinel.policy.api.ResourceAccessContext: Shortcut to the tenant scope of the targeted resource.
tenant() - Method in record class com.svenruppert.jsentinel.policy.api.ResourceRef: Returns the value of the tenant record component.
tenant() - Method in record class com.svenruppert.jsentinel.ratelimiting.RateLimitKey: Returns the value of the tenant record component.
tenant() - Method in record class com.svenruppert.jsentinel.session.JSentinelVersionKey: Returns the value of the tenant record component.
tenant() - Method in record class com.svenruppert.jsentinel.session.SessionRecord: Returns the value of the tenant record component.
TENANT - Enum constant in enum class com.svenruppert.jsentinel.credential.abuse.AbuseDimension: Per-tenant counter — protects a shared customer slice.
TenantAwarePasswordHashPolicyResolver - Interface in com.svenruppert.jsentinel.credential.tenant: SPI that resolves the PasswordHashPolicy for a given TenantCredentialContext.
TenantAwarePepperReferenceResolver - Interface in com.svenruppert.jsentinel.credential.tenant: SPI that resolves the active PepperReference for a tenant context.
TenantCredentialContext - Record Class in com.svenruppert.jsentinel.credential.tenant: Tenant scope of an in-flight credential operation.
TenantCredentialContext(TenantId) - Constructor for record class com.svenruppert.jsentinel.credential.tenant.TenantCredentialContext: Creates an instance of a TenantCredentialContext record class.
tenantFor(U) - Method in interface com.svenruppert.jsentinel.authorization.api.SubjectIdResolver: Returns the TenantId for subject.
tenantId() - Method in record class com.svenruppert.jsentinel.credential.tenant.TenantCredentialContext: Returns the value of the tenantId record component.
TenantId - Record Class in com.svenruppert.jsentinel.authorization.api.tenant: Identifier for the tenant scope of a security decision.
TenantId(String) - Constructor for record class com.svenruppert.jsentinel.authorization.api.tenant.TenantId: Validates the record component.
ThreadSafeTokenCredentialStore - Interface in com.svenruppert.jsentinel.credential.propagation: Marker for TokenCredentialStore implementations that are safe to use from multiple threads.
Throttled(int, int, Duration, Duration) - Constructor for record class com.svenruppert.jsentinel.ratelimiting.RateLimitDecision.Throttled: Validates the components.
TIMEOUT - Enum constant in enum class com.svenruppert.jsentinel.credential.compromised.CompromisedPasswordResult.FailureReason
TimeoutSessionPolicy - Class in com.svenruppert.jsentinel.session: Minimal SessionPolicy with idle timeout, absolute lifetime, and optional session-id rotation after login.
TimeoutSessionPolicy() - Constructor for class com.svenruppert.jsentinel.session.TimeoutSessionPolicy
TimeoutSessionPolicy(TimeoutSessionPolicy.Config, Clock, JSentinelAuditService) - Constructor for class com.svenruppert.jsentinel.session.TimeoutSessionPolicy
TimeoutSessionPolicy.Config - Record Class in com.svenruppert.jsentinel.session: Tunable thresholds.
timestamp() - Method in record class com.svenruppert.jsentinel.accountlifecycle.JSentinelNotification: Returns the value of the timestamp record component.
timestamp() - Method in record class com.svenruppert.jsentinel.audit.AccessDenied: Returns the value of the timestamp record component.
timestamp() - Method in record class com.svenruppert.jsentinel.audit.AccessGranted: Returns the value of the timestamp record component.
timestamp() - Method in record class com.svenruppert.jsentinel.audit.ActionDenied: Returns the value of the timestamp record component.
timestamp() - Method in record class com.svenruppert.jsentinel.audit.ApiKeyDenied: Returns the value of the timestamp record component.
timestamp() - Method in record class com.svenruppert.jsentinel.audit.ApiKeyUsed: Returns the value of the timestamp record component.
timestamp() - Method in interface com.svenruppert.jsentinel.audit.AuditEvent: The UTC instant at which this event was created.
timestamp() - Method in record class com.svenruppert.jsentinel.audit.BootstrapAdminCreated: Returns the value of the timestamp record component.
timestamp() - Method in record class com.svenruppert.jsentinel.audit.BootstrapTokenRejected: Returns the value of the timestamp record component.
timestamp() - Method in record class com.svenruppert.jsentinel.audit.BruteForceLimitReached: Returns the value of the timestamp record component.
timestamp() - Method in record class com.svenruppert.jsentinel.audit.CredentialRehashed: Returns the value of the timestamp record component.
timestamp() - Method in record class com.svenruppert.jsentinel.audit.CredentialStatusChanged: Returns the value of the timestamp record component.
timestamp() - Method in record class com.svenruppert.jsentinel.audit.CredentialVerificationFailed: Returns the value of the timestamp record component.
timestamp() - Method in record class com.svenruppert.jsentinel.audit.CredentialVerificationSucceeded: Returns the value of the timestamp record component.
timestamp() - Method in record class com.svenruppert.jsentinel.audit.EmailVerificationRequested: Returns the value of the timestamp record component.
timestamp() - Method in record class com.svenruppert.jsentinel.audit.EmailVerified: Returns the value of the timestamp record component.
timestamp() - Method in record class com.svenruppert.jsentinel.audit.LoginFailed: Returns the value of the timestamp record component.
timestamp() - Method in record class com.svenruppert.jsentinel.audit.LoginSucceeded: Returns the value of the timestamp record component.
timestamp() - Method in record class com.svenruppert.jsentinel.audit.LogoutPerformed: Returns the value of the timestamp record component.
timestamp() - Method in record class com.svenruppert.jsentinel.audit.PasswordResetCompleted: Returns the value of the timestamp record component.
timestamp() - Method in record class com.svenruppert.jsentinel.audit.PasswordResetRequested: Returns the value of the timestamp record component.
timestamp() - Method in record class com.svenruppert.jsentinel.audit.PolicyEvaluated: Returns the value of the timestamp record component.
timestamp() - Method in record class com.svenruppert.jsentinel.audit.RateLimitExceeded: Returns the value of the timestamp record component.
timestamp() - Method in record class com.svenruppert.jsentinel.audit.RoleAssigned: Returns the value of the timestamp record component.
timestamp() - Method in record class com.svenruppert.jsentinel.audit.RoleRevoked: Returns the value of the timestamp record component.
timestamp() - Method in record class com.svenruppert.jsentinel.audit.SessionCreated: Returns the value of the timestamp record component.
timestamp() - Method in record class com.svenruppert.jsentinel.audit.SessionExpired: Returns the value of the timestamp record component.
timestamp() - Method in record class com.svenruppert.jsentinel.audit.SessionInvalidated: Returns the value of the timestamp record component.
timestamp() - Method in record class com.svenruppert.jsentinel.audit.SessionStale: Returns the value of the timestamp record component.
timestamp() - Method in record class com.svenruppert.jsentinel.audit.StepUpChallenged: Returns the value of the timestamp record component.
timestamp() - Method in record class com.svenruppert.jsentinel.audit.TokenRotated: Returns the value of the timestamp record component.
timestamp() - Method in record class com.svenruppert.jsentinel.audit.UserCreated: Returns the value of the timestamp record component.
timestamp() - Method in record class com.svenruppert.jsentinel.audit.UserDeleted: Returns the value of the timestamp record component.
timestamp() - Method in record class com.svenruppert.jsentinel.bruteforce.LoginAttemptContext: Returns the value of the timestamp record component.
timeWindow(String, LocalTime, LocalTime) - Static method in class com.svenruppert.jsentinel.policy.api.JSentinelPolicies: Time-of-day gate: access permitted only inside the [start, end) window in the JVM-default timezone.
timeWindow(String, LocalTime, LocalTime, ZoneId, Clock) - Static method in class com.svenruppert.jsentinel.policy.api.JSentinelPolicies: Time-of-day gate with explicit timezone and clock.
to() - Method in record class com.svenruppert.jsentinel.audit.AuditQuery: Returns the value of the to record component.
to() - Method in exception class com.svenruppert.jsentinel.credential.lifecycle.InvalidStatusTransitionException
toAlgorithm() - Method in record class com.svenruppert.jsentinel.audit.CredentialRehashed: Returns the value of the toAlgorithm record component.
toAuthorizationDecision(PolicyDecision) - Static method in class com.svenruppert.jsentinel.policy.api.PolicyDecisions: Bridges a PolicyDecision to an AuthorizationDecision.
token() - Method in record class com.svenruppert.jsentinel.credential.reset.ResetTokenCreationResult.Created: Returns the value of the token record component.
TOKEN_FILE_ENV - Static variable in class com.svenruppert.jsentinel.bootstrap.BootstrapConfigurationLoader
TOKEN_FILE_PROPERTY - Static variable in class com.svenruppert.jsentinel.bootstrap.BootstrapConfigurationLoader
TOKEN_TTL_ENV - Static variable in class com.svenruppert.jsentinel.bootstrap.BootstrapConfigurationLoader
TOKEN_TTL_PROPERTY - Static variable in class com.svenruppert.jsentinel.bootstrap.BootstrapConfigurationLoader
TokenCredential - Interface in com.svenruppert.jsentinel.credential.propagation: Sealed type for inbound / outbound tokens flowing through the V00.74 token-propagation pipeline.
tokenCredentialStore() - Static method in class com.svenruppert.jsentinel.authorization.api.JSentinelServiceResolver: V00.74 — resolve the TokenCredentialStore.
TokenCredentialStore - Interface in com.svenruppert.jsentinel.credential.propagation: Persistence-neutral store for the current subject's TokenCredential.
TokenDigestRecord - Record Class in com.svenruppert.jsentinel.credential.token: Persisted half of a SelectorVerifierToken: the non-secret selector plus the digest of the verifier.
TokenDigestRecord(String, byte[]) - Constructor for record class com.svenruppert.jsentinel.credential.token.TokenDigestRecord: Creates an instance of a TokenDigestRecord record class.
TokenDigestService - Class in com.svenruppert.jsentinel.credential.token: Selector/verifier token issuance and verification.
TokenDigestService() - Constructor for class com.svenruppert.jsentinel.credential.token.TokenDigestService
TokenDigestService(SecureRandom) - Constructor for class com.svenruppert.jsentinel.credential.token.TokenDigestService
tokenFilePath() - Method in record class com.svenruppert.jsentinel.bootstrap.BootstrapConfiguration: Returns the value of the tokenFilePath record component.
tokenHash() - Method in record class com.svenruppert.jsentinel.accountlifecycle.EmailVerificationTokenRecord: Returns the value of the tokenHash record component.
tokenHash() - Method in record class com.svenruppert.jsentinel.accountlifecycle.PasswordResetTokenRecord: Returns the value of the tokenHash record component.
tokenHash() - Method in record class com.svenruppert.jsentinel.audit.EmailVerificationRequested: Returns the value of the tokenHash record component.
tokenHash() - Method in record class com.svenruppert.jsentinel.audit.EmailVerified: Returns the value of the tokenHash record component.
tokenHash() - Method in record class com.svenruppert.jsentinel.audit.PasswordResetCompleted: Returns the value of the tokenHash record component.
tokenHash() - Method in record class com.svenruppert.jsentinel.audit.PasswordResetRequested: Returns the value of the tokenHash record component.
tokenHash() - Method in record class com.svenruppert.jsentinel.authentication.RefreshTokenRecord: Returns the value of the tokenHash record component.
tokenHash() - Method in record class com.svenruppert.jsentinel.authentication.RememberMeTokenRecord: Returns the value of the tokenHash record component.
TokenPair(String, Instant, String, Instant, SubjectId) - Constructor for record class com.svenruppert.jsentinel.authentication.TokenService.TokenPair: Validates the components.
TokenRotated - Record Class in com.svenruppert.jsentinel.audit: Emitted when a refresh-token rotation succeeded — the old token was consumed and a fresh access + refresh pair was issued.
TokenRotated(Instant, String, String, String) - Constructor for record class com.svenruppert.jsentinel.audit.TokenRotated: Validates the record components.
TokenService - Class in com.svenruppert.jsentinel.authentication: Access + rotating refresh token issuance on top of a RefreshTokenStore.
TokenService(RefreshTokenStore, PasswordHasher, JSentinelAuditService) - Constructor for class com.svenruppert.jsentinel.authentication.TokenService: Convenience constructor: tenant TenantId.DEFAULT, system clock, 256-bit token source, 15-min access TTL, 30-day refresh TTL.
TokenService(RefreshTokenStore, PasswordHasher, JSentinelAuditService, TenantId, Clock, Supplier, Duration, Duration) - Constructor for class com.svenruppert.jsentinel.authentication.TokenService: Full constructor.
TokenService.TokenPair - Record Class in com.svenruppert.jsentinel.authentication: Returned from issue / rotate.
tokenValidity() - Method in record class com.svenruppert.jsentinel.bootstrap.BootstrapConfiguration: Returns the value of the tokenValidity record component.
TokenVerificationResult - Interface in com.svenruppert.jsentinel.credential.token: Outcome of TokenDigestService.verifyVerifier(SelectorVerifierToken, TokenDigestRecord).
TokenVerificationResult.NotMatched - Record Class in com.svenruppert.jsentinel.credential.token
TokenVerificationResult.SelectorMismatch - Record Class in com.svenruppert.jsentinel.credential.token: The supplied token's selector does not match the stored digest's selector.
TokenVerificationResult.Verified - Record Class in com.svenruppert.jsentinel.credential.token
TOO_LONG - Enum constant in enum class com.svenruppert.jsentinel.credential.input.PasswordInputViolation
TOO_SHORT - Enum constant in enum class com.svenruppert.jsentinel.credential.input.PasswordInputViolation
toStatus() - Method in record class com.svenruppert.jsentinel.audit.CredentialStatusChanged: Returns the value of the toStatus record component.
toStatus() - Method in record class com.svenruppert.jsentinel.credential.metrics.CredentialMetricEvent.LifecycleTransition: Returns the value of the toStatus record component.
toString() - Method in record class com.svenruppert.jsentinel.accountlifecycle.EmailVerificationService.IssuedToken: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.accountlifecycle.EmailVerificationTokenRecord: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.accountlifecycle.JSentinelNotification: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.accountlifecycle.PasswordResetService.IssuedToken: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.accountlifecycle.PasswordResetTokenRecord: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.action.ActionPermission: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.audit.AccessDenied: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.audit.AccessGranted: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.audit.ActionDenied: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.audit.ApiKeyDenied: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.audit.ApiKeyUsed: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.audit.AuditEnvelope: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.audit.AuditQuery: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.audit.BootstrapAdminCreated: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.audit.BootstrapTokenRejected: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.audit.BruteForceLimitReached: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.audit.CredentialRehashed: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.audit.CredentialStatusChanged: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.audit.CredentialVerificationFailed: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.audit.CredentialVerificationSucceeded: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.audit.EmailVerificationRequested: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.audit.EmailVerified: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.audit.LoginFailed: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.audit.LoginSucceeded: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.audit.LogoutPerformed: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.audit.PasswordResetCompleted: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.audit.PasswordResetRequested: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.audit.PolicyEvaluated: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.audit.RateLimitExceeded: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.audit.RoleAssigned: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.audit.RoleRevoked: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.audit.SessionCreated: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.audit.SessionExpired: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.audit.SessionInvalidated: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.audit.SessionStale: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.audit.StepUpChallenged: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.audit.TokenRotated: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.audit.UserCreated: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.audit.UserDeleted: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.authentication.ApiKeyRecord: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.authentication.PasswordHash: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.authentication.RefreshTokenRecord: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.authentication.RememberMeTokenRecord: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.authentication.StoreBackedRememberMeService.IssuedToken: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.authentication.TokenService.TokenPair: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.authorization.api.AuthorizationDecision.Forbidden: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.authorization.api.AuthorizationDecision.Granted: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.authorization.api.AuthorizationDecision.StepUpRequired: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.authorization.api.AuthorizationDecision.Unauthenticated: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.authorization.api.JSentinelSubject: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.authorization.api.operations.SecuredOperationDescriptor: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.authorization.api.permissions.PermissionName: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.authorization.api.roles.RoleAssignmentKey: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.authorization.api.roles.RoleName: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.authorization.api.tenant.TenantId: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.authorization.impl.AnnotationAccessEvaluatorPair: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.authorization.navigation.AccessContext: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.authorization.navigation.AccessDecision.Granted: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.authorization.navigation.AccessDecision.Reroute: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.authorization.navigation.AccessDecision.RerouteToError: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.authorization.navigation.AccessDecision.RerouteWithParameter: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.authorization.navigation.AccessDecision.RerouteWithParameters: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.authorization.navigation.NavigationAccessDecision.AccessDenied: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.authorization.navigation.NavigationAccessDecision.Allowed: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.authorization.navigation.NavigationAccessDecision.AlreadyLoggedIn: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.authorization.navigation.NavigationAccessDecision.LoginRequired: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.authorization.navigation.NavigationJSentinelContext: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.bootstrap.BootstrapConfiguration: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.bootstrap.BootstrapState: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.bootstrap.BootstrapStatus: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.bootstrap.BootstrapToken: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.bootstrap.CreateInitialAdminCommand: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.bootstrap.InitialAdminCreationResult.AlreadyInitialized: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.bootstrap.InitialAdminCreationResult.Created: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.bootstrap.InitialAdminCreationResult.InternalError: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.bootstrap.InitialAdminCreationResult.InvalidBootstrapToken: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.bootstrap.InitialAdminCreationResult.InvalidUsername: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.bootstrap.InitialAdminCreationResult.PasswordPolicyViolation: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.bootstrap.NewAdministrator: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.bootstrap.PasswordPolicy.PasswordPolicyResult: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.bruteforce.LoginAttemptConfiguration: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.bruteforce.LoginAttemptContext: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.bruteforce.LoginAttemptDecision.Allowed: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.bruteforce.LoginAttemptDecision.LockedOut: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.bruteforce.LoginAttemptKey: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.credential.abuse.AbuseAttemptContext: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.credential.abuse.AbuseDecision.Allow: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.credential.abuse.AbuseDecision.Block: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.credential.abuse.AbuseDecision.Delay: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.credential.abuse.AbuseDecision.RequireAdditionalCheck: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.credential.abuse.AbuseLimitsPolicy.Limit: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.credential.abuse.AbusePatternMonitor.Config: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.credential.abuse.AbusePatternSignal: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.credential.change.PasswordChangeCommand: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.credential.change.PasswordChangeResult.Blocked: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.credential.change.PasswordChangeResult.Conflict: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.credential.change.PasswordChangeResult.CurrentPasswordRejected: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.credential.change.PasswordChangeResult.NewPasswordRejected: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.credential.change.PasswordChangeResult.NotFound: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.credential.change.PasswordChangeResult.Succeeded: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.credential.compromised.CompromisedPasswordPolicy: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.credential.compromised.CompromisedPasswordResult.CheckFailed: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.credential.compromised.CompromisedPasswordResult.Clean: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.credential.compromised.CompromisedPasswordResult.Pwned: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.credential.emergency.EmergencyPolicyOverride: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.credential.emergency.MassCredentialStatusChange.Report: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.credential.history.PasswordHistoryDecision.Allowed: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.credential.history.PasswordHistoryDecision.Reused: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.credential.history.PasswordHistoryEntry: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.credential.history.PasswordHistoryPolicy: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.credential.input.PasswordContext: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.credential.input.PasswordInputPolicy: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.credential.input.PasswordInputValidationResult.Accepted: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.credential.input.PasswordInputValidationResult.Rejected: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.credential.lifecycle.CredentialLifecycleDecision.BlockedPermanent: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.credential.lifecycle.CredentialLifecycleDecision.BlockedTemporary: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.credential.lifecycle.CredentialLifecycleDecision.ForcePasswordChange: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.credential.lifecycle.CredentialLifecycleDecision.Proceed: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.credential.lifecycle.CredentialLifecycleDecision.ResetInProgress: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.credential.metrics.CredentialMetricEvent.AbuseSignal: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.credential.metrics.CredentialMetricEvent.HashDuration: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.credential.metrics.CredentialMetricEvent.KdfLimiterRejection: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.credential.metrics.CredentialMetricEvent.LifecycleTransition: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.credential.metrics.CredentialMetricEvent.RehashRequested: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.credential.metrics.CredentialMetricEvent.VerifyDuration: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.credential.password.calibration.CalibrationProfile: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.credential.password.CredentialVerificationResult.Failed: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.credential.password.CredentialVerificationResult.Verified: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.credential.password.envelope.PasswordHashEnvelope: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.credential.password.envelope.PasswordHashRecord: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.credential.password.limiter.KdfResourceBudget: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.credential.password.PasswordHashResult: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.credential.password.pepper.PepperReference: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.credential.password.policy.ValidatedPasswordHash: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.credential.password.provider.ResourceEstimate: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.credential.password.ProviderVerificationResult.Matched: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.credential.password.ProviderVerificationResult.NotMatched: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.credential.password.ProviderVerificationResult.ProviderError: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.credential.password.RehashDecision.NotRequired: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.credential.password.RehashDecision.Required: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.credential.propagation.ApiKey: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.credential.propagation.BearerToken: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.credential.propagation.HeaderValue: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.credential.propagation.OidcAccessToken: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.credential.propagation.OutboundCall: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.credential.propagation.RefreshToken: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.credential.reset.PasswordResetConsumeResult.Failed: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.credential.reset.PasswordResetConsumeResult.Succeeded: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.credential.reset.ResetTokenCreationResult.Blocked: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.credential.reset.ResetTokenCreationResult.Created: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.credential.reset.ResetTokenCreationResult.UnknownUser: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.credential.reset.ResetTokenRecord: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.credential.reset.ResetTokenUpdateResult.NotFound: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.credential.reset.ResetTokenUpdateResult.Stale: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.credential.reset.ResetTokenUpdateResult.Updated: Returns a string representation of this record class.
toString() - Method in class com.svenruppert.jsentinel.credential.secret.SecretValue: Returns a redacted shape: "SecretValue[length=N, destroyed=false]".
toString() - Method in record class com.svenruppert.jsentinel.credential.standards.FipsProfile: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.credential.store.CredentialRecord: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.credential.store.CredentialUpdateResult.NotFound: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.credential.store.CredentialUpdateResult.Stale: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.credential.store.CredentialUpdateResult.Updated: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.credential.tenant.TenantCredentialContext: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.credential.token.SelectorVerifierToken: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.credential.token.TokenDigestRecord: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.credential.token.TokenVerificationResult.NotMatched: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.credential.token.TokenVerificationResult.SelectorMismatch: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.credential.token.TokenVerificationResult.Verified: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.logout.SubjectId: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.policy.api.PolicyContext: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.policy.api.PolicyDecision.Allowed: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.policy.api.PolicyDecision.Denied: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.policy.api.PolicyDecision.StepUpRequired: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.policy.api.ResourceAccessContext: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.policy.api.ResourceRef: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.ratelimiting.RateLimitDecision.Allowed: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.ratelimiting.RateLimitDecision.Throttled: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.ratelimiting.RateLimitKey: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.session.JSentinelVersion: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.session.JSentinelVersionEnforcer.EnforcementOutcome.Continue: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.session.JSentinelVersionEnforcer.EnforcementOutcome.SessionStale: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.session.JSentinelVersionKey: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.session.JSentinelVersionStatus.Current: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.session.JSentinelVersionStatus.Drifted: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.session.SessionContext: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.session.SessionDecision.Continue: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.session.SessionDecision.Invalidate: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.session.SessionDecision.RequireLogin: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.session.SessionId: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.session.SessionMetadata: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.session.SessionPolicyDecision.AbsoluteLifetimeExceeded: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.session.SessionPolicyDecision.Active: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.session.SessionPolicyDecision.IdleTimeout: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.session.SessionRecord: Returns a string representation of this record class.
toString() - Method in record class com.svenruppert.jsentinel.session.TimeoutSessionPolicy.Config: Returns a string representation of this record class.
total() - Method in record class com.svenruppert.jsentinel.credential.emergency.MassCredentialStatusChange.Report
trackedUsers() - Method in class com.svenruppert.jsentinel.credential.history.InMemoryPasswordHistoryStore: Test helper: number of users with at least one entry.
Trade-off - Section in record class com.svenruppert.jsentinel.credential.history.PasswordHistoryPolicy
TRANSIENT_CONSOLE - Enum constant in enum class com.svenruppert.jsentinel.bootstrap.BootstrapMode
transientConsole() - Static method in record class com.svenruppert.jsentinel.bootstrap.BootstrapConfiguration
transientConsole(Duration) - Static method in record class com.svenruppert.jsentinel.bootstrap.BootstrapConfiguration
transition(String, CredentialStatus, CredentialStatus, String) - Method in class com.svenruppert.jsentinel.credential.lifecycle.CredentialLifecycleService: Atomic state transition.
Transition side - Section in class com.svenruppert.jsentinel.credential.lifecycle.CredentialLifecycleService
tryAcquire(RateLimitKey) - Method in class com.svenruppert.jsentinel.ratelimiting.InMemoryRateLimitPolicy
tryAcquire(RateLimitKey) - Method in interface com.svenruppert.jsentinel.ratelimiting.RateLimitPolicy: Attempts to record one event under key against the policy's configured per-window limit.
Two-call flow - Section in interface com.svenruppert.jsentinel.credential.abuse.AbuseDetectionService
type() - Method in record class com.svenruppert.jsentinel.authorization.navigation.AccessDecision.RerouteToError: Returns the value of the type record component.
types() - Method in record class com.svenruppert.jsentinel.audit.AuditQuery: Returns the value of the types record component.

U

unauthenticated(String) - Static method in interface com.svenruppert.jsentinel.authorization.api.AuthorizationDecision: Creates an unauthenticated decision.
Unauthenticated(String) - Constructor for record class com.svenruppert.jsentinel.authorization.api.AuthorizationDecision.Unauthenticated: Creates an instance of a Unauthenticated record class.
unicodeNormalisationEnabled() - Method in record class com.svenruppert.jsentinel.credential.input.PasswordInputPolicy: Returns the value of the unicodeNormalisationEnabled record component.
UNKNOWN - Enum constant in enum class com.svenruppert.jsentinel.credential.compromised.CompromisedPasswordResult.FailureReason
UNKNOWN - Static variable in record class com.svenruppert.jsentinel.credential.password.provider.ResourceEstimate
UNKNOWN_USER - Enum constant in enum class com.svenruppert.jsentinel.credential.password.dummy.DummyVerificationContext
UnknownUser() - Constructor for record class com.svenruppert.jsentinel.credential.reset.ResetTokenCreationResult.UnknownUser: Creates an instance of a UnknownUser record class.
unregister(SubjectId, String) - Method in class com.svenruppert.jsentinel.logout.InMemorySubjectSessionRegistry
unregister(SubjectId, String) - Method in class com.svenruppert.jsentinel.logout.StoreBackedSubjectSessionRegistry
unregister(SubjectId, String) - Method in interface com.svenruppert.jsentinel.logout.SubjectSessionRegistry: Removes the (subjectId, sessionId) association if present.
Updated(ResetTokenRecord) - Constructor for record class com.svenruppert.jsentinel.credential.reset.ResetTokenUpdateResult.Updated: Creates an instance of a Updated record class.
Updated(CredentialRecord) - Constructor for record class com.svenruppert.jsentinel.credential.store.CredentialUpdateResult.Updated: Creates an instance of a Updated record class.
updatedAt() - Method in record class com.svenruppert.jsentinel.credential.store.CredentialRecord: Returns the value of the updatedAt record component.
updateHashIfCurrent(String, String, String, Instant) - Method in interface com.svenruppert.jsentinel.credential.store.CredentialStore: Atomically replaces the stored hash if it still matches expectedEncodedHash.
updateHashIfCurrent(String, String, String, Instant) - Method in class com.svenruppert.jsentinel.credential.store.InMemoryCredentialStore
updateStatusIfCurrent(String, CredentialStatus, CredentialStatus, Instant) - Method in interface com.svenruppert.jsentinel.credential.store.CredentialStore: Atomically replaces the stored status if it still matches expectedStatus.
updateStatusIfCurrent(String, CredentialStatus, CredentialStatus, Instant) - Method in class com.svenruppert.jsentinel.credential.store.InMemoryCredentialStore
UserCreated - Record Class in com.svenruppert.jsentinel.audit: A new user account was added to the directory.
UserCreated(Instant, String, String, String) - Constructor for record class com.svenruppert.jsentinel.audit.UserCreated: Creates an instance of a UserCreated record class.
UserDeleted - Record Class in com.svenruppert.jsentinel.audit: A user account was removed from the directory.
UserDeleted(Instant, String, String) - Constructor for record class com.svenruppert.jsentinel.audit.UserDeleted: Creates an instance of a UserDeleted record class.
userId() - Method in record class com.svenruppert.jsentinel.bruteforce.LoginAttemptKey: Returns the value of the userId record component.
username() - Method in record class com.svenruppert.jsentinel.audit.BootstrapAdminCreated: Returns the value of the username record component.
username() - Method in record class com.svenruppert.jsentinel.audit.BruteForceLimitReached: Returns the value of the username record component.
username() - Method in record class com.svenruppert.jsentinel.audit.CredentialRehashed: Returns the value of the username record component.
username() - Method in record class com.svenruppert.jsentinel.audit.CredentialStatusChanged: Returns the value of the username record component.
username() - Method in record class com.svenruppert.jsentinel.audit.CredentialVerificationFailed: Returns the value of the username record component.
username() - Method in record class com.svenruppert.jsentinel.audit.CredentialVerificationSucceeded: Returns the value of the username record component.
username() - Method in record class com.svenruppert.jsentinel.audit.LoginFailed: Returns the value of the username record component.
username() - Method in record class com.svenruppert.jsentinel.audit.LoginSucceeded: Returns the value of the username record component.
username() - Method in record class com.svenruppert.jsentinel.audit.UserCreated: Returns the value of the username record component.
username() - Method in record class com.svenruppert.jsentinel.audit.UserDeleted: Returns the value of the username record component.
username() - Method in record class com.svenruppert.jsentinel.bootstrap.CreateInitialAdminCommand: Returns the value of the username record component.
username() - Method in record class com.svenruppert.jsentinel.bootstrap.InitialAdminCreationResult.Created: Returns the value of the username record component.
username() - Method in record class com.svenruppert.jsentinel.bootstrap.NewAdministrator: Returns the value of the username record component.
username() - Method in record class com.svenruppert.jsentinel.bruteforce.LoginAttemptContext: Returns the value of the username record component.
username() - Method in record class com.svenruppert.jsentinel.credential.abuse.AbuseAttemptContext: Returns the value of the username record component.
username() - Method in record class com.svenruppert.jsentinel.credential.change.PasswordChangeCommand: Returns the value of the username record component.
username() - Method in record class com.svenruppert.jsentinel.credential.input.PasswordContext: Returns the value of the username record component.
username() - Method in record class com.svenruppert.jsentinel.credential.reset.ResetTokenRecord: Returns the value of the username record component.
username() - Method in record class com.svenruppert.jsentinel.credential.store.CredentialRecord: Returns the value of the username record component.
USERNAME - Enum constant in enum class com.svenruppert.jsentinel.credential.abuse.AbuseDimension: Per-username counter — defends against targeted brute force.

V

V1 - Enum constant in enum class com.svenruppert.jsentinel.credential.password.envelope.PasswordHashFormatVersion: First productive Phase-1a envelope.
valid() - Method in record class com.svenruppert.jsentinel.bootstrap.PasswordPolicy.PasswordPolicyResult: Returns the value of the valid record component.
validate(char[]) - Method in class com.svenruppert.jsentinel.bootstrap.MinimumLengthPasswordPolicy
validate(char[]) - Method in interface com.svenruppert.jsentinel.bootstrap.PasswordPolicy
validate(char[], PasswordInputPolicy) - Method in class com.svenruppert.jsentinel.credential.input.PasswordInputValidator
validate(PasswordHashEnvelope, PasswordHashPolicy) - Method in class com.svenruppert.jsentinel.credential.password.policy.DefaultPasswordHashValidator
validate(PasswordHashEnvelope, PasswordHashPolicy) - Method in interface com.svenruppert.jsentinel.credential.password.policy.PasswordHashValidator
validate(SecretValue, PasswordInputPolicy) - Method in class com.svenruppert.jsentinel.credential.input.PasswordInputValidator
validate(SecretValue, PasswordInputPolicy, PasswordContext) - Method in class com.svenruppert.jsentinel.credential.input.ContextAwarePasswordValidator: Runs both the structural and context-aware checks.
validate(String) - Method in class com.svenruppert.jsentinel.accountlifecycle.EmailVerificationService: Validates a candidate plain token.
validate(String) - Method in class com.svenruppert.jsentinel.accountlifecycle.PasswordResetService: Validates a candidate plain token.
validate(String) - Method in class com.svenruppert.jsentinel.authentication.StoreBackedRememberMeService: Validates the supplied plain token.
validate(Map, Map, Map) - Method in class com.svenruppert.jsentinel.credential.password.pbkdf2.Pbkdf2ParameterValidator
validate(Map, Map, Map) - Method in interface com.svenruppert.jsentinel.credential.password.policy.PasswordHashParameterValidator: Validates the supplied parameter map against the active policy bounds.
validatedAgainst() - Method in record class com.svenruppert.jsentinel.credential.password.policy.ValidatedPasswordHash: Returns the value of the validatedAgainst record component.
ValidatedPasswordHash - Record Class in com.svenruppert.jsentinel.credential.password.policy: Successful output of PasswordHashValidator.validate(PasswordHashEnvelope, PasswordHashPolicy).
ValidatedPasswordHash(PasswordHashEnvelope, PasswordHashPolicy) - Constructor for record class com.svenruppert.jsentinel.credential.password.policy.ValidatedPasswordHash: Creates an instance of a ValidatedPasswordHash record class.
value() - Element in annotation interface com.svenruppert.jsentinel.authorization.annotations.JSentinelAnnotation: The evaluator class that is to be assigned to the annotation.
value() - Element in annotation interface com.svenruppert.jsentinel.authorization.annotations.ProtectedBy: Evaluator class.
value() - Element in annotation interface com.svenruppert.jsentinel.authorization.annotations.RequiresAllPermissions: Required permission names.
value() - Element in annotation interface com.svenruppert.jsentinel.authorization.annotations.RequiresAnyPermission: Required permission names.
value() - Element in annotation interface com.svenruppert.jsentinel.authorization.annotations.RequiresPermission: Required permission names.
value() - Element in annotation interface com.svenruppert.jsentinel.authorization.annotations.RequiresPolicy: Name of the policy registered with the PolicyRegistry.
value() - Element in annotation interface com.svenruppert.jsentinel.authorization.annotations.RequiresRole: Required role names.
value() - Element in annotation interface com.svenruppert.jsentinel.authorization.api.ExperimentalJSentinelApi: Description of the experimental nature.
value() - Method in record class com.svenruppert.jsentinel.authorization.api.permissions.PermissionName: Alias for generic code that treats names as values.
value() - Method in record class com.svenruppert.jsentinel.authorization.api.roles.RoleName: Alias for generic code that treats names as values.
value() - Method in record class com.svenruppert.jsentinel.authorization.api.tenant.TenantId: Returns the value of the value record component.
value() - Method in record class com.svenruppert.jsentinel.bootstrap.BootstrapToken: Returns the value of the value record component.
value() - Method in record class com.svenruppert.jsentinel.credential.propagation.ApiKey: Returns the value of the value record component.
value() - Method in record class com.svenruppert.jsentinel.credential.propagation.BearerToken: Returns the value of the value record component.
value() - Method in record class com.svenruppert.jsentinel.credential.propagation.HeaderValue: Returns the value of the value record component.
value() - Method in record class com.svenruppert.jsentinel.credential.propagation.OidcAccessToken: Returns the value of the value record component.
value() - Method in record class com.svenruppert.jsentinel.credential.propagation.RefreshToken: Returns the value of the value record component.
value() - Method in interface com.svenruppert.jsentinel.credential.propagation.TokenCredential: The raw token string.
value() - Method in record class com.svenruppert.jsentinel.logout.SubjectId: Returns the value of the value record component.
value() - Method in record class com.svenruppert.jsentinel.session.JSentinelVersion: Returns the value of the value record component.
value() - Method in record class com.svenruppert.jsentinel.session.SessionId: Returns the value of the value record component.
valueOf(String) - Static method in enum class com.svenruppert.jsentinel.accountlifecycle.JSentinelNotification.Kind: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class com.svenruppert.jsentinel.bootstrap.BootstrapMode: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class com.svenruppert.jsentinel.credential.abuse.AbuseAttemptType: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class com.svenruppert.jsentinel.credential.abuse.AbuseDimension: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class com.svenruppert.jsentinel.credential.abuse.AbusePattern: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class com.svenruppert.jsentinel.credential.abuse.AttemptOutcome: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class com.svenruppert.jsentinel.credential.change.SessionHandlingDecision: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class com.svenruppert.jsentinel.credential.compromised.CheckFailurePolicy: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class com.svenruppert.jsentinel.credential.compromised.CompromisedPasswordResult.FailureReason: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class com.svenruppert.jsentinel.credential.CredentialType: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class com.svenruppert.jsentinel.credential.emergency.EmergencyPolicyOverride.Reason: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class com.svenruppert.jsentinel.credential.input.PasswordInputViolation: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class com.svenruppert.jsentinel.credential.InternalAuditEventType: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class com.svenruppert.jsentinel.credential.password.dummy.DummyVerificationContext: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class com.svenruppert.jsentinel.credential.password.envelope.PasswordHashFormatVersion: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class com.svenruppert.jsentinel.credential.password.RehashReason: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class com.svenruppert.jsentinel.credential.PublicFailureType: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class com.svenruppert.jsentinel.credential.reset.ResetTokenStatus: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class com.svenruppert.jsentinel.credential.store.CredentialStatus: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class com.svenruppert.jsentinel.logout.LogoutScope: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class com.svenruppert.jsentinel.policy.api.PolicyDecision.StepUpMethod: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class com.svenruppert.jsentinel.session.SessionStatus: Returns the enum constant of this class with the specified name.
values() - Static method in enum class com.svenruppert.jsentinel.accountlifecycle.JSentinelNotification.Kind: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class com.svenruppert.jsentinel.bootstrap.BootstrapMode: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class com.svenruppert.jsentinel.credential.abuse.AbuseAttemptType: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class com.svenruppert.jsentinel.credential.abuse.AbuseDimension: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class com.svenruppert.jsentinel.credential.abuse.AbusePattern: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class com.svenruppert.jsentinel.credential.abuse.AttemptOutcome: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class com.svenruppert.jsentinel.credential.change.SessionHandlingDecision: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class com.svenruppert.jsentinel.credential.compromised.CheckFailurePolicy: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class com.svenruppert.jsentinel.credential.compromised.CompromisedPasswordResult.FailureReason: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class com.svenruppert.jsentinel.credential.CredentialType: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class com.svenruppert.jsentinel.credential.emergency.EmergencyPolicyOverride.Reason: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class com.svenruppert.jsentinel.credential.input.PasswordInputViolation: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class com.svenruppert.jsentinel.credential.InternalAuditEventType: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class com.svenruppert.jsentinel.credential.password.dummy.DummyVerificationContext: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class com.svenruppert.jsentinel.credential.password.envelope.PasswordHashFormatVersion: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class com.svenruppert.jsentinel.credential.password.RehashReason: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class com.svenruppert.jsentinel.credential.PublicFailureType: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class com.svenruppert.jsentinel.credential.reset.ResetTokenStatus: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class com.svenruppert.jsentinel.credential.store.CredentialStatus: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class com.svenruppert.jsentinel.logout.LogoutScope: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class com.svenruppert.jsentinel.policy.api.PolicyDecision.StepUpMethod: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class com.svenruppert.jsentinel.session.SessionStatus: Returns an array containing the constants of this enum class, in the order they are declared.
VERIFICATION_DUMMY_PATH - Enum constant in enum class com.svenruppert.jsentinel.credential.InternalAuditEventType
VERIFICATION_FAILED_DECODE_ERROR - Enum constant in enum class com.svenruppert.jsentinel.credential.InternalAuditEventType
VERIFICATION_FAILED_INVALID_PARAMETERS - Enum constant in enum class com.svenruppert.jsentinel.credential.InternalAuditEventType
VERIFICATION_FAILED_MISMATCH - Enum constant in enum class com.svenruppert.jsentinel.credential.InternalAuditEventType
VERIFICATION_FAILED_PROVIDER_ERROR - Enum constant in enum class com.svenruppert.jsentinel.credential.InternalAuditEventType
VERIFICATION_FAILED_UNKNOWN_PEPPER_KEY - Enum constant in enum class com.svenruppert.jsentinel.credential.InternalAuditEventType
VERIFICATION_FAILED_UNKNOWN_PROVIDER - Enum constant in enum class com.svenruppert.jsentinel.credential.InternalAuditEventType
VERIFICATION_FAILED_UNSUPPORTED_ALGORITHM - Enum constant in enum class com.svenruppert.jsentinel.credential.InternalAuditEventType
VERIFICATION_FAILED_UNSUPPORTED_FORMAT_VERSION - Enum constant in enum class com.svenruppert.jsentinel.credential.InternalAuditEventType
VERIFICATION_REJECTED_KDF_LIMIT - Enum constant in enum class com.svenruppert.jsentinel.credential.InternalAuditEventType
VERIFICATION_SUCCESS - Enum constant in enum class com.svenruppert.jsentinel.credential.InternalAuditEventType
verified() - Method in record class com.svenruppert.jsentinel.credential.metrics.CredentialMetricEvent.VerifyDuration: Returns the value of the verified record component.
Verified() - Constructor for record class com.svenruppert.jsentinel.credential.token.TokenVerificationResult.Verified: Creates an instance of a Verified record class.
Verified(String, CredentialType, String, String, int, int, Optional) - Constructor for record class com.svenruppert.jsentinel.credential.password.CredentialVerificationResult.Verified: Creates an instance of a Verified record class.
verifier() - Method in record class com.svenruppert.jsentinel.credential.token.SelectorVerifierToken: Returns the value of the verifier record component.
verifierDigest() - Method in record class com.svenruppert.jsentinel.credential.token.TokenDigestRecord: Returns the value of the verifierDigest record component.
verify(char[], PasswordHash) - Method in interface com.svenruppert.jsentinel.authentication.PasswordHasher: Verifies a candidate password against a typed PasswordHash.
verify(char[], PasswordHashEnvelope, Optional) - Method in class com.svenruppert.jsentinel.credential.password.pbkdf2.Pbkdf2PasswordHashProvider
verify(char[], PasswordHashEnvelope, Optional) - Method in interface com.svenruppert.jsentinel.credential.password.provider.PasswordHashProvider: Verifies the supplied password against the parsed envelope.
verify(char[], String) - Method in interface com.svenruppert.jsentinel.authentication.PasswordHasher: Verifies a candidate password against a wire-format stored hash.
verify(char[], String) - Method in class com.svenruppert.jsentinel.authentication.Pbkdf2PasswordHasher
verify(char[], String) - Method in class com.svenruppert.jsentinel.credential.password.DefaultPasswordHashingService
verify(char[], String) - Method in interface com.svenruppert.jsentinel.credential.password.PasswordHashingService: Runs the verification pipeline on the supplied envelope.
verify(SecretValue, String) - Method in interface com.svenruppert.jsentinel.credential.password.PasswordHashingService: SecretValue overload for PasswordHashingService.verify(char[], String).
verifyAgainstNothing(char[]) - Method in class com.svenruppert.jsentinel.credential.password.DefaultPasswordHashingService
verifyAgainstNothing(char[]) - Method in interface com.svenruppert.jsentinel.credential.password.PasswordHashingService: Convenience entry point for callers that already know there is no stored envelope to verify against (typically "unknown user" paths).
verifyAgainstNothing(SecretValue) - Method in interface com.svenruppert.jsentinel.credential.password.PasswordHashingService: SecretValue overload for PasswordHashingService.verifyAgainstNothing(char[]).
VerifyDuration(String, String, int, long, boolean, boolean) - Constructor for record class com.svenruppert.jsentinel.credential.metrics.CredentialMetricEvent.VerifyDuration: Creates an instance of a VerifyDuration record class.
verifyVerifier(SelectorVerifierToken, TokenDigestRecord) - Method in class com.svenruppert.jsentinel.credential.token.TokenDigestService: Verifies the supplied token's verifier against the stored digest record.
version() - Method in record class com.svenruppert.jsentinel.credential.reset.ResetTokenRecord: Returns the value of the version record component.
version() - Method in record class com.svenruppert.jsentinel.credential.store.CredentialRecord: Returns the value of the version record component.
violation() - Method in record class com.svenruppert.jsentinel.credential.change.PasswordChangeResult.NewPasswordRejected: Returns the value of the violation record component.
violation() - Method in record class com.svenruppert.jsentinel.credential.input.PasswordInputValidationResult.Rejected: Returns the value of the violation record component.
violation(String) - Static method in record class com.svenruppert.jsentinel.bootstrap.PasswordPolicy.PasswordPolicyResult
visibleFor(JSentinelSubject) - Method in class com.svenruppert.jsentinel.authorization.api.operations.OperationVisibilityService

W

WARN - Enum constant in enum class com.svenruppert.jsentinel.credential.compromised.CheckFailurePolicy: Treat a failed check as Clean but raise a structured audit event so operators can review later.
window() - Method in record class com.svenruppert.jsentinel.audit.RateLimitExceeded: Returns the value of the window record component.
window() - Method in record class com.svenruppert.jsentinel.bruteforce.LoginAttemptConfiguration: Returns the value of the window record component.
window() - Method in record class com.svenruppert.jsentinel.credential.abuse.AbuseLimitsPolicy.Limit: Returns the value of the window record component.
window() - Method in class com.svenruppert.jsentinel.ratelimiting.InMemoryRateLimitPolicy
window() - Method in record class com.svenruppert.jsentinel.ratelimiting.RateLimitDecision.Allowed: Returns the value of the window record component.
window() - Method in record class com.svenruppert.jsentinel.ratelimiting.RateLimitDecision.Throttled: Returns the value of the window record component.
window() - Method in interface com.svenruppert.jsentinel.ratelimiting.RateLimitDecision
windowSize() - Method in record class com.svenruppert.jsentinel.credential.abuse.AbusePatternSignal: Returns the value of the windowSize record component.
wipe() - Method in class com.svenruppert.jsentinel.credential.password.pepper.InMemoryPepperService: Zeroes every held key and forgets all key ids.
wireValue() - Method in enum class com.svenruppert.jsentinel.credential.password.envelope.PasswordHashFormatVersion
with(AbuseAttemptType, AbuseDimension, AbuseLimitsPolicy.Limit) - Method in class com.svenruppert.jsentinel.credential.abuse.AbuseLimitsPolicy.Builder
withActiveKey(String, byte[]) - Static method in class com.svenruppert.jsentinel.credential.password.pepper.InMemoryPepperService: Convenience: build a service from a single active key.
withConsumedAt(Instant) - Method in record class com.svenruppert.jsentinel.accountlifecycle.EmailVerificationTokenRecord: Returns a copy with EmailVerificationTokenRecord.consumedAt() set to at.
withConsumedAt(Instant) - Method in record class com.svenruppert.jsentinel.accountlifecycle.PasswordResetTokenRecord: Returns a copy with PasswordResetTokenRecord.consumedAt() set to at — the canonical way to mark a token consumed.
withHash(String, Instant) - Method in record class com.svenruppert.jsentinel.credential.store.CredentialRecord: Returns a new record with the supplied hash and timestamp, version bumped by one.
withLastActivityAt(Instant) - Method in record class com.svenruppert.jsentinel.session.SessionRecord: Returns a copy with SessionRecord.lastActivityAt() updated to newLastActivity.
withLastUsedAt(Instant) - Method in record class com.svenruppert.jsentinel.authentication.ApiKeyRecord: Returns a copy with ApiKeyRecord.lastUsedAt() set to at.
withReplacedBy(String) - Method in record class com.svenruppert.jsentinel.authentication.RefreshTokenRecord: Returns a copy linking this record to its successor.
withRevokedAt(Instant) - Method in record class com.svenruppert.jsentinel.authentication.ApiKeyRecord: Returns a copy with ApiKeyRecord.revokedAt() set to at.
withRevokedAt(Instant) - Method in record class com.svenruppert.jsentinel.authentication.RefreshTokenRecord: Returns a copy marked revoked at at.
withStatus(ResetTokenStatus) - Method in record class com.svenruppert.jsentinel.credential.reset.ResetTokenRecord
withStatus(CredentialStatus, Instant) - Method in record class com.svenruppert.jsentinel.credential.store.CredentialRecord: Returns a new record with the supplied status and timestamp, version bumped by one.
withStatus(SessionStatus) - Method in record class com.svenruppert.jsentinel.session.SessionRecord: Returns a copy with SessionRecord.status() updated to newStatus.

A B C D E F G H I J K L M N O P Q R S T U V W
All Classes and Interfaces|All Packages|Constant Field Values|Serialized Form