Spring-security: when using a ReactiveAuthorizationManager no AuthenticationEvents are published

Created on 12 Jan 2018  路  2Comments  路  Source: spring-projects/spring-security

When I use the reactive WebFilter in a webflux application no AuthenticationEvents are published

core

Most helpful comment

@rwinch it is extremely frustrating for your users that this just silently fails with no clue as to why. If you are claiming that Spring Security works for a reactive stack, please update your documentation to be extremely explicit about limitations. Auditing is considered to be a first class capability of Spring Security.

Given @jhoeller comments on https://jira.spring.io/browse/SPR-16481 can you please clarify if there is a workaround or listener class implementation that someone can do in a Reactive Stack with Spring Security. I'm currently working on an application where auditing is not optional.

All 2 comments

Thanks for the report. This is currently blocked by https://jira.spring.io/browse/SPR-16481

@rwinch it is extremely frustrating for your users that this just silently fails with no clue as to why. If you are claiming that Spring Security works for a reactive stack, please update your documentation to be extremely explicit about limitations. Auditing is considered to be a first class capability of Spring Security.

Given @jhoeller comments on https://jira.spring.io/browse/SPR-16481 can you please clarify if there is a workaround or listener class implementation that someone can do in a Reactive Stack with Spring Security. I'm currently working on an application where auditing is not optional.

Was this page helpful?
0 / 5 - 0 ratings