Project: talendesb
Issue TESB-10374: cCXF: user Credentials propagation
We need to provide possibility to make call on behalf of already authenticated user (existing SAML Token). Consumer: We need to provide possibility to get SAML Token from the Request Header and store it somewhere, so it could be used in the route. May be just in the fixed header element 'samlToken' of the exchange. Getting of the SAML Token should work only in case 'SAML Token' enabled. And always in case Service Registry is enabled. This should also work for payload dataformat. Producer: We need to provide possibility to make authenticated on behalf call using existing SAML Token and technical user (alias/password). If 'Use Authentication'/'SAML Token' selected we have 2 options: - username/password (as for now) - use existing SAML Token (new one) May be add checkbox 'propagate credentials' to settings. If not selected - show username/password fields. In case propogation enabled: we pass 'samlToken' and alias/password value to make on behalf authentication to STS. In case 'Use Service Registry' is selected, we need to allow user set u/p or propagation option.
Story points: 5