security
security copied to clipboard
Add OpenId test for deferred expression
According to the specification, deferred expression is supported everywhere, where an EL is supported.
The test can be a copy of https://github.com/jakartaee/security/blob/master/tck/app-openid/src/main/java/ee/jakarta/tck/security/test/client/defaulttests/SecuredServletWithEL.java but use a deferred expession.
For example, a user can choose which provider to use to authenticate. In that case, a deferred EL should be used for configuration values related to OpenID Provider, such as providerURI, clientId, clientSecret, in order to choose the provider configuration based on user's decision.
If deferred expressions don't make sense (for example in useSession attribute), the javadoc should clarify that.