Package com.svenruppert.jsentinel.audit

package com.svenruppert.jsentinel.audit

Class	Description
AccessDenied	Access to a protected route or endpoint was refused.
AccessGranted	A subject was granted access to a protected route or endpoint.
ActionDenied	A guarded action call was denied — the subject did not satisfy the required ActionPermission.
ApiKeyDenied	Emitted when an API-key authentication was refused — unknown key, expired, revoked, or in a foreign tenant.
ApiKeyUsed	Emitted when an API-key was successfully used to authenticate a request — i.e.
AuditEnvelope	Persisted form of an AuditEvent.
AuditEvent	Sealed root of the typed security audit event hierarchy.
AuditEventStore	Persistent counterpart to AuditSink.
AuditQuery	Filter passed to JSentinelAuditService.query(...).
AuditSink	Write-only destination for AuditEvents.
BootstrapAdminCreated	The first administrator was successfully created via the bootstrap flow.
BootstrapTokenRejected	A bootstrap-token submission was rejected.
BruteForceLimitReached	The login attempt policy locked a username/client because it crossed a failure threshold.
CompositeAuditService	JSentinelAuditService that fans every published event out to: a primary RingBufferAuditSink used as the query backend, and zero or more additional AuditSinks (logging, file, SIEM, …). Every sink runs independently — a failing extra sink does not stop the fan-out and never causes publish(...) to throw.
CredentialRehashed	A successful verification triggered a transparent rehash of the stored credential.
CredentialStatusChanged	Credential lifecycle status transitioned from fromStatus to toStatus.
CredentialVerificationFailed	Failed password verification, carrying the internal differentiated classification so audit sinks can distinguish unknown user from wrong password, broken envelope, missing provider or rejected pepper key.
CredentialVerificationSucceeded	Successful password verification, recorded by the credential audit publisher so audit sinks see the same outcome the LoginAttemptPolicy recorded.
DefaultCompositeAuditService	No-arg JSentinelAuditService suitable for META-INF/services registration.
EmailVerificationRequested	Emitted when an email-verification token is issued for a subject / email pair.
EmailVerified	Emitted when an email-verification token is consumed and the email is considered verified.
InMemoryAuditEventStore	In-memory AuditEventStore backed by a single tenant-scoped list.
JSentinelAuditService	Read/write facade for security audit events.
LoggingAuditSink	AuditSink that writes a single Logger line per event at INFO level.
LoginFailed	A login attempt was rejected — credentials wrong, account unknown, or blocked by an upstream policy.
LoginSucceeded	Credentials were accepted and the subject is now authenticated.
LogoutPerformed	A subject's session was terminated by an explicit logout.
NoopJSentinelAuditService	Default JSentinelAuditService — discards every event and never retains anything.
PasswordResetCompleted	Emitted when a password-reset token is consumed and the password has been replaced.
PasswordResetRequested	Emitted when a password-reset token is issued for a subject.
PolicyEvaluated	A named Policy was evaluated against a PolicyContext.
RateLimitExceeded	Emitted by RateLimitPolicy.tryAcquire when an event was refused because the per-key event count within the configured window equals or exceeds the limit.
RingBufferAuditSink	Bounded in-memory ring buffer of AuditEvents.
RoleAssigned	A role was assigned to a subject by an administrator action.
RoleRevoked	A role was revoked from a subject by an administrator action.
SessionCreated	A new session was opened for a subject (typically after successful login).
SessionExpired	A session was ended by the policy because it crossed an inactivity or absolute-lifetime threshold.
SessionInvalidated	A session was forcibly invalidated by application or framework code (rotation after login, role change, password reset, admin action).
SessionStale	Emitted when a request was refused because the session's security-version snapshot no longer matches the subject's current version.
StepUpChallenged	An adapter challenged the subject for a step-up authentication — either via an HTTP 401 + WWW-Authenticate response (REST) or by rerouting to a configured step-up route (Vaadin).
StoreBackedJSentinelAuditService	JSentinelAuditService that persists events through an AuditEventStore (Phase 2).
TokenRotated	Emitted when a refresh-token rotation succeeded — the old token was consumed and a fresh access + refresh pair was issued.
UserCreated	A new user account was added to the directory.
UserDeleted	A user account was removed from the directory.