Class AbuseLimitsPolicy

java.lang.Object

com.svenruppert.jsentinel.credential.abuse.AbuseLimitsPolicy

public final class AbuseLimitsPolicy
extends Object

Per-dimension and per-attempt-type limits consumed by InMemoryAbuseDetectionService.

The model is intentionally simple: each (AbuseAttemptType, AbuseDimension) key carries a sliding window of length window and three escalating failure thresholds — delayAt, stepUpAt, blockAt — that map onto AbuseDecision.Delay, AbuseDecision.RequireAdditionalCheck and AbuseDecision.Block respectively. Successful attempts reset the per-username failure counter; volume counters (CLIENT_ADDRESS / TENANT / GLOBAL) keep tracking regardless of outcome.

Nested Class Summary

Nested Classes

Modifier and Type	Class	Description
static final class	AbuseLimitsPolicy.Builder
static final record	AbuseLimitsPolicy.Limit	Single sliding-window limit definition.

Method Summary

Modifier and Type	Method	Description
static AbuseLimitsPolicy.Builder	builder()
static AbuseLimitsPolicy	defaults()	Sensible default policy: 5/10/15 failures per username per 15 minutes for LOGIN; 30 / 60 / 120 per client address per hour (volume counter); no step-up by default.
Optional<AbuseLimitsPolicy.Limit>	limit(AbuseAttemptType attemptType, AbuseDimension dimension)

Methods inherited from class Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Method Details

limit

public Optional<AbuseLimitsPolicy.Limit> limit(AbuseAttemptType attemptType,
 AbuseDimension dimension)

builder

public static AbuseLimitsPolicy.Builder builder()

defaults

public static AbuseLimitsPolicy defaults()

Sensible default policy: 5/10/15 failures per username per 15 minutes for LOGIN; 30 / 60 / 120 per client address per hour (volume counter); no step-up by default.