Class MassCredentialStatusChange

java.lang.Object

com.svenruppert.jsentinel.credential.emergency.MassCredentialStatusChange

public final class MassCredentialStatusChange
extends Object

Operational helper for incident response: bulk-transition every named credential into a single target status (typically CredentialStatus.MUST_CHANGE or CredentialStatus.COMPROMISED).

The helper exists because the CredentialStore contract deliberately exposes no iteration — the operator (or the consuming application) chooses which subjects are in scope by supplying an Iterable<String> of usernames. This shape works the same against an in-memory store, a SQL store with a cursor, or an Eclipse-Store snapshot.

Every successful transition publishes a CredentialStatusChanged audit event so the incident timeline is preserved (CWE-778). Records that are already at the target status are skipped; records that are missing from the store are recorded as MassCredentialStatusChange.Report.notFound() so the operator can investigate residue.

Nested Class Summary

Nested Classes

Modifier and Type	Class	Description
static final record	MassCredentialStatusChange.Report	Aggregate report of a mass status change.

Constructor Summary

Constructors

Constructor	Description
MassCredentialStatusChange(CredentialStore store, JSentinelAuditService audit, Clock clock)

Method Summary

Modifier and Type	Method	Description
MassCredentialStatusChange.Report	forceAllToStatus(Iterable<String> usernames, CredentialStatus targetStatus, EmergencyPolicyOverride override)	Transitions each named credential to targetStatus.

Methods inherited from class Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

MassCredentialStatusChange

public MassCredentialStatusChange(CredentialStore store,
 JSentinelAuditService audit,
 Clock clock)

Method Details

forceAllToStatus

public MassCredentialStatusChange.Report forceAllToStatus(Iterable<String> usernames,
 CredentialStatus targetStatus,
 EmergencyPolicyOverride override)

Transitions each named credential to targetStatus.

Parameters:

usernames - subjects in scope

targetStatus - the new status to set

override - the operator-declared incident context; its incidentId and reason.name() are recorded in the audit reason field

Returns:

a MassCredentialStatusChange.Report with per-username outcomes; the report carries counts only — never the secret data of any touched record