Hi Sergei and Colm, I am going to make a small refactoring in STSTokenOutInterceptor.
The idea is to move AuthMode enumeration, AuthParams class and configureBasicSTSClient method into STSUtils and reuse them from there in STSTokenOutInterceptor. The AuthMode and AuthParams will be first marked as deprecated in STSTokenOutInterceptor and removed in the next major CXF version. Reasons: 1) It will be easy to reuse AuthMode, AuthParams and configureBasicSTSClient for token validation, not only for token issuing. 2) IMO the classes logically fit better to STSUtils In the future, I would like to extend AuthMode with UT_SYMMETRIC AND KERBEROS. WDYT? Andrei.
