Details
-
Improvement
-
Status: Closed
-
Major
-
Resolution: Fixed
-
None
-
None
-
None
-
Unknown
Description
Currently we populate the SecurityContext in the WSS4JInInterceptor using the Principal retrieved from WSS4J only (apart from the case of a SAML Token that contains roles encoded as attributes). This task is to populate the SecurityContext using a JAAS Subject retrieved from WSS4J, so that the given roles. etc are available.