Anil Saldhana [https://community.jboss.org/people/anil.saldhana] created the discussion "Security Context Propagation" To view the discussion, visit: https://community.jboss.org/message/755141#755141 -------------------------------------------------------------- Discussion related to https://docs.jboss.org/author/display/SECURITY/Java+Application+Security https://docs.jboss.org/author/display/SECURITY/Java+Application+Security When there is a need to propagate security context, the following usecases come into my mind: a) Thread level security context propagation. b) Session level security context propagation.    - Internal session maintained by PicketBox.    - External session injected. The API can look like the following: SecurityContext context = // SecurityContextPropagation.setContext(context, Level.THREAD); SecurityContextPropagation.setContext(context, Level.SESSION); SecurityContextPropagation.setContext(context, session, Level.SESSION); context = SecurityContextPropagation.getContext();  //Thread level or internal session context = SecurityContextPropagation.getContext(session); Note: Session is an instance of PicketBoxSession. -------------------------------------------------------------- Reply to this message by going to Community [https://community.jboss.org/message/755141#755141] Start a new discussion in PicketBox Development at Community [https://community.jboss.org/choose-container!input.jspa?contentType=1&...]