fediz-idp: adopt to Spring Security 4.x

[amarkevich]

No description provided.

[coheigea]

@amarkevich Have you checked that this part is still working properly? "roleName.substring(5)"

cxf-fediz/services/idp-core/src/main/java/org/apache/cxf/fediz/service/idp/service/security/GrantedAuthorityEntitlements.java

Line 74 in fcb562d

Role role = roleDAO.getRole(roleName.substring(5), Arrays.asList("all"));

[amarkevich]

@coheigea Behavior is the same:
added debug output at pointed line
System.out.println(roleName + " -> " + roleName.substring(5));
and build for example systests/idp found expected

ROLE_IDP_LOGIN -> IDP_LOGIN

but also some

CLAIM_LIST -> _LIST
IDP_READ -> EAD

[coheigea]

@amarkevich Maybe we need to check to see if the role starts with "ROLE_"?

[andrei-ivanov]

The role prefix should be configurable in Spring Security, it could be missing entirely

[coheigea]

Tested the simpleWebapp demo + OIDC and it works fine. RS interface seems to work fine as well.