Interface AbuseDecision

All Known Implementing Classes:
AbuseDecision.Allow, AbuseDecision.Block, AbuseDecision.Delay, AbuseDecision.RequireAdditionalCheck
public sealed interface AbuseDecision permits AbuseDecision.Allow, AbuseDecision.Delay, AbuseDecision.Block, AbuseDecision.RequireAdditionalCheck
Progressive reaction returned by AbuseDetectionService.evaluate(AbuseAttemptContext).

Adapter-neutral, sealed. The adapter (Vaadin / REST / Standalone) maps these decisions to concrete responses, but the perimeter message must stay generic — exact counters / per-dimension specifics never leak (CWE-203).

  • Nested Class Summary

    Nested Classes
    Modifier and Type
    Interface
    Description
    static final record 
    AbuseDecision.Allow
    The attempt may proceed unconditionally.
    static final record 
    AbuseDecision.Block
    Refuse the attempt.
    static final record 
    AbuseDecision.Delay
    Honour the attempt but pause for delay first — a soft brake that slows automated scanners without locking the user out.
    static final record 
    AbuseDecision.RequireAdditionalCheck
    Require step-up authentication / captcha / additional check before the attempt may proceed.