Description: User should be able to use Acegi to do authorization for UsernameToken WS-Security messages when using CXF
Acceptance criteria:
- UsernameToken feature of WS-Security authenticates against Spring Security manager (this could happen indirectly through the Mule SecurityContext)
- How to configure is documented and explicit about what of WS-Security is actually supported
Notes
There may be code out there in the CXF community which enables this already.
CXF support only. does not include other transports
Dan will look at other features if in making the change but only commit is UsernameToken
Improvement
Open
Major
WS-Security & Spring Security integration