[CXF-4544] Create a common SAML-based SecurityContext for both the JAX-RS and JAX-WS layers

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 2.7
• Component/s: JAX-RS Security, WS-* Components
• Estimated Complexity: Unknown
• Assignee: Colm O hEigeartaigh
• Reporter: Colm O hEigeartaigh
• Created: 05/Oct/12 13:24
• Updated: 08/Nov/12 17:15
• Resolved: 05/Oct/12 13:29

Description

This task is to create a common SAML-based SecurityContext for both the JAX-RS and JAX-WS layers.

At the moment, the JAX-WS layer creates a LoginSecurityContext to return the principal + roles extracted from a SAML Assertion. However, it does not store the SAML Assertion itself. The JAX-RS layer has a custom SecurityContext implementation that stores the roles etc.

This task will add a new SAMLSecurityContext class to the rt-core module, and so downstream code can access a SAMLSecurityContext independently of whether it came from the JAX-RS or JAX-WS layer.