---
title: "Feature: #100307 - PSR-14 events for user login & logout"
manual: "TYPO3 Core Changelog"
version: "main"
permalink: "https://docs.typo3.org/permalink/changelog:feature-100307-1679924551"
source: "Changelog/12.3/Feature-100307-PSR-14EventsForUserLoginLogout.rst"
typo3-version: "12.3"
typo3-major: 12
type: "feature"
issue: 100307
forge: "https://forge.typo3.org/issues/100307"
tags: ["Backend", "Frontend", "PHP-API", "ext:core"]
rendered: "2026-09-17T21:17:42+00:00"
---

# Feature: #100307 - PSR-14 events for user login & logout {#feature-100307-psr-14-events-for-user-login-logout}

See [forge#100307](https://forge.typo3.org/issues/100307)

## Description {#description}

Three new PSR-14 events have been added:

-   `\TYPO3\CMS\Core\Authentication\Event\BeforeUserLogoutEvent`
-   `\TYPO3\CMS\Core\Authentication\Event\AfterUserLoggedOutEvent`
-   `\TYPO3\CMS\Core\Authentication\Event\AfterUserLoggedInEvent`

The purpose of these events is to trigger any kind of action when a user
has been successfully logged in or logged out.

TYPO3 Core itself uses `AfterUserLoggedInEvent` in the TYPO3 backend
to send an email to a user, if the login was successful.

The event features the following methods:

-   `getUser()`: Returns the `\TYPO3\CMS\Core\Authentication\AbstractUserAuthentication` derivative in question

The PSR-14 event `BeforeUserLogoutEvent` on top has the possibility
to bypass the regular logout process by TYPO3 (removing the cookie and
the user session) by calling `$event->disableRegularLogoutProcess()`
in an event listener.

The PSR-14 event `AfterUserLoggedInEvent` contains the method
`getRequest()` to return PSR-7 request object of the current request.

Registration of the event in your extension's `Services.yaml`:

**EXT:my_extension/Configuration/Services.yaml**

```yaml
MyVendor\MyExtension\Authentication\EventListener\MyEventListener:
    tags:
      - name: event.listener
        identifier: 'my-extension/after-user-logged-in'
```

The corresponding event listener class for `AfterUserLoggedInEvent`:

**EXT:my_extension/Classes/Authentication/EventListener/MyEventListener.php**

```php
namespace MyVendor\MyExtension\Authentication\EventListener;

use TYPO3\CMS\Core\Authentication\Event\AfterUserLoggedInEvent;

final class MyEventListener
{
    public function __invoke(AfterUserLoggedInEvent $event): void
    {
        if (
            $event->getUser() instanceof BackendUserAuthentication
            && $event->getUser()->isAdmin()
        )
        {
            // Do something like: Clear all caches after login
        }
    }
}
```

## Impact {#impact}

It is now possible to modify and adapt user functionality based on successful
login or active logout.