SEC-2902: "Missing" class: obtain pre-auth roles from request headers

[spring-projects-issues]

Jeff Jensen (Migrated from SEC-2902) said:

I recently configured pre-auth with request headers only for both user id and roles. I did not find an example of this situation and all examples I found either did not load roles or roles were not loaded from request headers.

While Spring has a generic class for obtaining the user id from headers, I also did not find a generic class for obtaining the roles from headers.

Attached is a simple generic class for obtaining roles from request headers that Spring should have to complete the pair: PreAuthenticatedGrantedAuthoritiesWebAuthenticationDetailsSource

[spring-projects-issues]

Jeff Jensen said:

Updated impl to handle multiple roles per header, separated by a delimiter.

[spring-projects-issues]

Jeff Jensen said:

Updated impl to handle multiple differently-named request headers containing roles, not just one request header name.