Package-level declarations
How the starter resolves the caller's identity — the extension point you implement and the provided default. The per-request capture filter that feeds the identity into serialization is internal and omitted from this reference.
Extension point
PrincipalResolver — maps a Spring Security
Authenticationto a framework-neutral org.ihawu.core.policy.IhawuPrincipal. Provide your own bean to override — e.g. to read OIDC/JWT claims.
Provided default
IhawuPrincipalResolver — the default PrincipalResolver: username,
ROLE_-stripped authorities, anddetailsattributes; unauthenticated or anonymous requests resolve tonull(fail closed).
Types
Default PrincipalResolver: maps the current Authentication to an IhawuPrincipal:
Maps a Spring Security Authentication to a framework-neutral IhawuPrincipal.