Class LoginAttemptConfigurationLoader

java.lang.Object

com.svenruppert.jsentinel.bruteforce.LoginAttemptConfigurationLoader

public final class LoginAttemptConfigurationLoader
extends Object

Loads LoginAttemptConfiguration from system properties and environment variables, with a caller-supplied default.

Sources, in order of precedence

1. System property (highest)
2. Environment variable
3. Caller-provided default (lowest)

Keys

Configuration keys (default scope = login endpoint)

System property	Environment variable
security.login.attempts.threshold	SECURITY_LOGIN_ATTEMPTS_THRESHOLD
security.login.attempts.window	SECURITY_LOGIN_ATTEMPTS_WINDOW
security.login.attempts.initial-lockout	SECURITY_LOGIN_ATTEMPTS_INITIAL_LOCKOUT
security.login.attempts.max-lockout	SECURITY_LOGIN_ATTEMPTS_MAX_LOCKOUT

Duration values are parsed as ISO-8601 (e.g. PT5M, PT1H). The forBootstrap() variant uses security.bootstrap.attempts.* prefixes so the bootstrap endpoint can be tuned independently of the normal login endpoint.

Invalid values fail fast with IllegalArgumentException.

Field Summary

Fields

Modifier and Type	Field	Description
static final String	BOOTSTRAP_INITIAL_LOCKOUT_ENV
static final String	BOOTSTRAP_INITIAL_LOCKOUT_PROPERTY
static final String	BOOTSTRAP_MAX_LOCKOUT_ENV
static final String	BOOTSTRAP_MAX_LOCKOUT_PROPERTY
static final String	BOOTSTRAP_THRESHOLD_ENV
static final String	BOOTSTRAP_THRESHOLD_PROPERTY
static final String	BOOTSTRAP_WINDOW_ENV
static final String	BOOTSTRAP_WINDOW_PROPERTY
static final String	LOGIN_INITIAL_LOCKOUT_ENV
static final String	LOGIN_INITIAL_LOCKOUT_PROPERTY
static final String	LOGIN_MAX_LOCKOUT_ENV
static final String	LOGIN_MAX_LOCKOUT_PROPERTY
static final String	LOGIN_THRESHOLD_ENV
static final String	LOGIN_THRESHOLD_PROPERTY
static final String	LOGIN_WINDOW_ENV
static final String	LOGIN_WINDOW_PROPERTY

Constructor Summary

Constructors

Constructor	Description
LoginAttemptConfigurationLoader()	Default loader reading from System.getProperty(String) and System.getenv(String).
LoginAttemptConfigurationLoader(Function<String,String> sysprop, Function<String,String> env)	Test seam: inject custom sources.

Method Summary

Modifier and Type	Method	Description
LoginAttemptConfiguration	forBootstrap()	Loads configuration for the bootstrap-admin endpoint, falling back to LoginAttemptConfiguration.strictBootstrap() when no source supplies a value.
LoginAttemptConfiguration	forLogin()	Loads configuration for the standard login endpoint, falling back to LoginAttemptConfiguration.defaults() when no source supplies a value.

Methods inherited from class Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Details

LOGIN_THRESHOLD_PROPERTY

public static final String LOGIN_THRESHOLD_PROPERTY

See Also:

• Constant Field Values

LOGIN_THRESHOLD_ENV

public static final String LOGIN_THRESHOLD_ENV

See Also:

• Constant Field Values

LOGIN_WINDOW_PROPERTY

public static final String LOGIN_WINDOW_PROPERTY

See Also:

• Constant Field Values

LOGIN_WINDOW_ENV

public static final String LOGIN_WINDOW_ENV

See Also:

• Constant Field Values

LOGIN_INITIAL_LOCKOUT_PROPERTY

public static final String LOGIN_INITIAL_LOCKOUT_PROPERTY

See Also:

• Constant Field Values

LOGIN_INITIAL_LOCKOUT_ENV

public static final String LOGIN_INITIAL_LOCKOUT_ENV

See Also:

• Constant Field Values

LOGIN_MAX_LOCKOUT_PROPERTY

public static final String LOGIN_MAX_LOCKOUT_PROPERTY

See Also:

• Constant Field Values

LOGIN_MAX_LOCKOUT_ENV

public static final String LOGIN_MAX_LOCKOUT_ENV

See Also:

• Constant Field Values

BOOTSTRAP_THRESHOLD_PROPERTY

public static final String BOOTSTRAP_THRESHOLD_PROPERTY

See Also:

• Constant Field Values

BOOTSTRAP_THRESHOLD_ENV

public static final String BOOTSTRAP_THRESHOLD_ENV

See Also:

• Constant Field Values

BOOTSTRAP_WINDOW_PROPERTY

public static final String BOOTSTRAP_WINDOW_PROPERTY

See Also:

• Constant Field Values

BOOTSTRAP_WINDOW_ENV

public static final String BOOTSTRAP_WINDOW_ENV

See Also:

• Constant Field Values

BOOTSTRAP_INITIAL_LOCKOUT_PROPERTY

public static final String BOOTSTRAP_INITIAL_LOCKOUT_PROPERTY

See Also:

• Constant Field Values

BOOTSTRAP_INITIAL_LOCKOUT_ENV

public static final String BOOTSTRAP_INITIAL_LOCKOUT_ENV

See Also:

• Constant Field Values

BOOTSTRAP_MAX_LOCKOUT_PROPERTY

public static final String BOOTSTRAP_MAX_LOCKOUT_PROPERTY

See Also:

• Constant Field Values

BOOTSTRAP_MAX_LOCKOUT_ENV

public static final String BOOTSTRAP_MAX_LOCKOUT_ENV

See Also:

• Constant Field Values

Constructor Details

LoginAttemptConfigurationLoader

public LoginAttemptConfigurationLoader()

Default loader reading from System.getProperty(String) and System.getenv(String).

LoginAttemptConfigurationLoader

public LoginAttemptConfigurationLoader(Function<String,String> sysprop,
 Function<String,String> env)

Test seam: inject custom sources.

Parameters:

sysprop - function returning system-property values (typically System.getProperty(String))

env - function returning environment-variable values (typically System.getenv(String))

Method Details

forLogin

public LoginAttemptConfiguration forLogin()

Loads configuration for the standard login endpoint, falling back to LoginAttemptConfiguration.defaults() when no source supplies a value.

forBootstrap

public LoginAttemptConfiguration forBootstrap()

Loads configuration for the bootstrap-admin endpoint, falling back to LoginAttemptConfiguration.strictBootstrap() when no source supplies a value.