Class InMemoryAbuseDetectionService

java.lang.Object

com.svenruppert.jsentinel.credential.abuse.InMemoryAbuseDetectionService

All Implemented Interfaces:

AbuseDetectionService

public final class InMemoryAbuseDetectionService
extends Object
implements AbuseDetectionService

In-memory reference implementation of AbuseDetectionService.

Each (AbuseAttemptType, AbuseDimension, dimensionKey) tuple has its own sliding-window deque of failure timestamps. AbuseDimension.USERNAME counters track failures only; AbuseDimension.CLIENT_ADDRESS, AbuseDimension.TENANT and AbuseDimension.GLOBAL track every attempt regardless of outcome (the volume axes).

Auditing is best-effort: every block / step-up / delay decision publishes a RateLimitExceeded event with the dimension encoded in the scope field. Sink failures are swallowed (CWE-778).

Constructor Summary

Constructors

Constructor	Description
InMemoryAbuseDetectionService(AbuseLimitsPolicy policy, JSentinelAuditService auditService)

Method Summary

Modifier and Type	Method	Description
AbuseDecision	evaluate(AbuseAttemptContext context)	Decides what reaction the caller should apply before running the credential operation.
void	recordOutcome(AbuseAttemptContext context, AttemptOutcome outcome)	Records the outcome of the operation so the counters can update.

Methods inherited from class Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

InMemoryAbuseDetectionService

public InMemoryAbuseDetectionService(AbuseLimitsPolicy policy,
 JSentinelAuditService auditService)

Method Details

evaluate

public AbuseDecision evaluate(AbuseAttemptContext context)

Description copied from interface: AbuseDetectionService

Decides what reaction the caller should apply before running the credential operation.

Specified by:

evaluate in interface AbuseDetectionService

recordOutcome

public void recordOutcome(AbuseAttemptContext context,
 AttemptOutcome outcome)

Description copied from interface: AbuseDetectionService

Records the outcome of the operation so the counters can update. Successful logins typically reset the per-username failure counter; volume counters (CLIENT_ADDRESS / TENANT / GLOBAL) usually keep tracking irrespective of outcome.

Specified by:

recordOutcome in interface AbuseDetectionService