Interface CredentialLifecycleDecision

All Known Implementing Classes:

CredentialLifecycleDecision.BlockedPermanent, CredentialLifecycleDecision.BlockedTemporary, CredentialLifecycleDecision.ForcePasswordChange, CredentialLifecycleDecision.Proceed, CredentialLifecycleDecision.ResetInProgress

public sealed interface CredentialLifecycleDecision
permits CredentialLifecycleDecision.Proceed, CredentialLifecycleDecision.ForcePasswordChange, CredentialLifecycleDecision.ResetInProgress, CredentialLifecycleDecision.BlockedTemporary, CredentialLifecycleDecision.BlockedPermanent

Adapter-neutral decision derived from a credential's current lifecycle status.

The decision never references HTTP redirects, Vaadin routes or any UI action. Adapters (Vaadin/REST/Standalone) own the mapping from CredentialLifecycleDecision to a concrete user-visible response (CWE-284).

Nested Class Summary

Nested Classes

Modifier and Type	Interface	Description
static final record	CredentialLifecycleDecision.BlockedPermanent	Permanent block (typically COMPROMISED or DISABLED).
static final record	CredentialLifecycleDecision.BlockedTemporary	Temporary block (typically LOCKED).
static final record	CredentialLifecycleDecision.ForcePasswordChange	Credentials verified, but the user must change the password before the session may proceed.
static final record	CredentialLifecycleDecision.Proceed	Normal login allowed.
static final record	CredentialLifecycleDecision.ResetInProgress	A reset token is outstanding for this credential.