Package org.springframework.security.authorization

Interface AuthorizationEventPublisher

All Known Implementing Classes:

SpringAuthorizationEventPublisher

public interface AuthorizationEventPublisher

A contract for publishing authorization events

Since:

5.7

See Also:

AuthorizationManager

Method Summary

Modifier and Type	Method	Description
<T> void	publishAuthorizationEvent(java.util.function.Supplier<Authentication> authentication, T object, AuthorizationDecision decision)	Publish the given details in the form of an event, typically AuthorizationGrantedEvent or AuthorizationDeniedEvent.

Method Detail

publishAuthorizationEvent

<T> void publishAuthorizationEvent(java.util.function.Supplier<Authentication> authentication,
                                   T object,
                                   AuthorizationDecision decision)

Publish the given details in the form of an event, typically AuthorizationGrantedEvent or AuthorizationDeniedEvent. Note that success events can be very noisy if enabled by default. Because of this implementations may choose to drop success events by default.

Type Parameters:

T - the secured object's type

Parameters:

authentication - a Supplier for the current user

object - the secured object

decision - the decision about whether the user may access the secured object