[CXF-6048] Support roles in the AuthPolicyValidatingInterceptor

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 3.0.3
• Estimated Complexity: Unknown
• Assignee: Colm O hEigeartaigh
• Reporter: Colm O hEigeartaigh
• Created: 13/Oct/14 15:13
• Updated: 16/Feb/15 16:09
• Resolved: 13/Oct/14 16:43

Description

The AuthPolicyValidatingInterceptor can be used to authenticate a HTTP B/A with a WSS4J Validator. For example, it could be combined with the STSTokenValidator to send the username/password to an STS for authentication. If the UsernameToken is transformed into a SAML Assertion, there is currently no way to set the roles in the security context