Sample application with CXF and Spring Security for Authn and Authz.

We have created a filter that puts HTTP basic authentication headers into an Authentication object inside SecurityContextHolder.
A part from that, spring FilterSecurityInterceptor has been configured to perform authentication, after our filter has done its job.
Auhtz works direcly within Spring Security using annotations.

All Spring Security config is done in META-INF/spring/beans.xml file, except for the @Secured annotations