Class PasswordHashingServices

java.lang.Object

com.svenruppert.jsentinel.credential.password.PasswordHashingServices

public final class PasswordHashingServices
extends Object

Wiring helpers for the Phase-1a PasswordHashingService.

Use defaults() for production code that wants the safe out-of-the-box configuration (OWASP-2023 PBKDF2 baseline, no pepper, KDF limiter with the default budget). Tests that need tighter parameters or different limiter behaviour build the service directly through the DefaultPasswordHashingService constructor.

Method Summary

Modifier and Type	Method	Description
static PasswordHashingService	defaults()	Builds a fully wired Phase-1a PasswordHashingService from the JDK-only PBKDF2 provider, the reference policy, the no-op pepper service and a semaphore-backed KDF limiter using the default budget.
static PasswordHashingService	defaults(PasswordHashPolicy policy)	Builds a fully wired Phase-1a PasswordHashingService that follows the supplied policy.
static PasswordHashingService	defaults(PasswordHashPolicy policy, KdfExecutionLimiter limiter)	Builds a fully wired Phase-1a PasswordHashingService with a caller-supplied policy and KDF limiter.
static PasswordHashingService	defaults(PasswordHashPolicy policy, KdfExecutionLimiter limiter, PepperService pepperService)	Builds a fully wired Phase-1a PasswordHashingService with a caller-supplied policy, KDF limiter and PepperService.

Methods inherited from class Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Method Details

defaults

public static PasswordHashingService defaults()

Builds a fully wired Phase-1a PasswordHashingService from the JDK-only PBKDF2 provider, the reference policy, the no-op pepper service and a semaphore-backed KDF limiter using the default budget.

defaults

public static PasswordHashingService defaults(PasswordHashPolicy policy)

Builds a fully wired Phase-1a PasswordHashingService that follows the supplied policy. The policy must list PBKDF2WithHmacSHA256 / pbkdf2-jdk as the preferred algorithm and provider (Phase 1a ships only the JDK provider).

defaults

public static PasswordHashingService defaults(PasswordHashPolicy policy,
 KdfExecutionLimiter limiter)

Builds a fully wired Phase-1a PasswordHashingService with a caller-supplied policy and KDF limiter. Mostly useful for tests that want a NoLimitKdfExecutionLimiter or a tight budget.

defaults

public static PasswordHashingService defaults(PasswordHashPolicy policy,
 KdfExecutionLimiter limiter,
 PepperService pepperService)

Builds a fully wired Phase-1a PasswordHashingService with a caller-supplied policy, KDF limiter and PepperService.

Pass an InMemoryPepperService (or any production-grade implementation) to enable post-KDF HMAC peppering. NoOpPepperService.INSTANCE disables peppering altogether — equivalent to the older two-argument overload.