The ApplicationEvent's source will be the Authentication object.
ApplicationEvent
source
Authentication
super.getSource()