Interface TenantAwarePasswordHashPolicyResolver

All Known Implementing Classes:
DefaultTenantAwarePasswordHashPolicyResolver
Functional Interface:
This is a functional interface and can therefore be used as the assignment target for a lambda expression or method reference.
@FunctionalInterface public interface TenantAwarePasswordHashPolicyResolver
SPI that resolves the PasswordHashPolicy for a given TenantCredentialContext.

The default deployment binding is single-tenant — see DefaultTenantAwarePasswordHashPolicyResolver. Multi-tenant deployments register a tenant-aware resolver that switches algorithm / parameters / policyVersion per tenant.

The resolver MUST return a non-null policy for every input. Unknown tenants fall back to the operator-configured default — implementations must not throw, otherwise a public failure could leak tenant existence (CWE-203).