Hi! I could upload the patch today if you would like, but I would still like to add a couple of pieces. Perhaps you could take a look at what I currently have, evaluate it, and begin the merge process while I am finishing up the following items:
1.) I have added a configurable SAMLCallbackHandler (an instance of javax.security.auth.callback.CallbackHandler) and a SAMLCallback that users can leverage to extract data from their local applications and provide it to WSS4J for use in creating the various SAML statement types. In my case, I am using Spring Security, so I have provided a callback handler implementation that pulls security-related information from the Spring Security context and makes it available to WSS4J for SAML statement creation. I don't think we need to include my callback handler instance in the main codebase (all we should need there is the SAML callback itself, not the environment specific handler), but you might want to include it as a sample in the examples section to demonstrate how to build a SAML callback handler. In addition, my callback handler currently only supports collecting data for the SAML authentication and attribute statements. I would like to make it a little more generic, and add support for collecting data for SAML authorization decision statements as well.
2.) I have added two SAML component building classes that are used by the assertion wrapper to generate both SAML v1.1 and SAML v2.0 artifacts. These builders currently support SAML authentication statements, and SAML attribute statements. I would like to add support for creating SAML authorization decision statements as well.
These two additional pieces should provide a reasonable base to support SAML v1.1 and SAML v2.0 going forward as at that point, all of the SAML statement types will be supported at both SAML version levels. Let me know how you would like to proceed. I could also just wait to upload the patch until I have had a chance to add these last two features. That way, you would only have to attempt the merge once. I should have a chance to complete these items over the few days, so they would be available early to mid next week.