Shouldn't the DefaultAuthorizationsProvider look up the auths from the map of params passed in?  I think if you pass the map of params to the AuthProvider.getAuths() method, you can work around this issue here.