Interface JSentinelAuditService

All Known Implementing Classes:
CompositeAuditService, DefaultCompositeAuditService, NoopJSentinelAuditService, StoreBackedJSentinelAuditService

public interface JSentinelAuditService
Read/write facade for security audit events.

The write side (publish(AuditEvent)) is the canonical entry point for every framework emit-site. Implementations typically fan the event out to one or more AuditSinks. The read side (query(AuditQuery)) is optional — implementations that do not retain events should return an empty list.

Implementations must not throw from either method. Audit failure must never break the security flow that emitted the event; an empty list is acceptable when no retained data is available.

  • Method Summary

    Modifier and Type
    Method
    Description
    void
    Records the given event.
    Returns retained events matching query, oldest first.
  • Method Details

    • publish

      void publish(AuditEvent event)
      Records the given event. Never throws.
      Parameters:
      event - non-null typed audit event
    • query

      List<AuditEvent> query(AuditQuery query)
      Returns retained events matching query, oldest first. Implementations that do not retain events return an empty list.
      Parameters:
      query - filter, never null
      Returns:
      retained matching events, never null