Hi
Concrete use case - we have implemented the OASIS S-RAMP specification, in which it
requires basic auth support
(
http://docs.oasis-open.org/s-ramp/s-ramp/v1.0/s-ramp-v1.0-part2-atom-bind... section
5 "The S-RAMP Specification does not attempt to define a security model for products
that implement it. For the Atom Binding, the only security requirement is that at a
minimum, client and server implementations MUST be capable of being configured to use HTTP
Basic Authentication in conjunction with a connection made with TLS.").
However we also need the same service to support bearer token, for use within our KeyCloak
SSO session.
I've implemented a possible solution, details defined on
https://issues.jboss.org/browse/KEYCLOAK-861.
If this solution is on the right path, I would appreciate any feedback on any changes that
might be required before submitting a PR. Currently there are no tests, but would aim to
provide some with the PR.
Regards
Gary