Event-driven authorization applies access control logic in response to published events—rather than inline with requests. Common in architectures using Kafka or pub/sub, this pattern integrates event-driven design with asynchronous access enforcement.