maybeRefreshUser();
if (!rulesNotAllowed.isEmpty()) {
logger.debug("Failed to login due to rules: {}", rulesNotAllowed);
logger.debug("firing the AuthorizationFailedEvent event");
authorizationFailedEvent.fire(new AuthorizationFailedEvent(rulesNotAllowed));
} else {
frameworkFlow.run();
}
}