I am maintaining a JSF application with is deployed to Wildfly and uses a picketbox custom login module for form-based authentication.
I am in the process of migrating to Elytron but have hit an issue. In the current application, we have users that can belong to more than one organization and have different sets of roles for each. In the application they can switch organizations and the roles will change.
In my Elytron setup, the user is authenticated then gets all of the roles across all organizations. I wanted to do a custom role mapper to figure out the correct roles for the current company, but how does Elytron know which company is selected in the app? The old login module was built into the app but Elytron custom code has to be in a separate module. Is there a way to create a custom role mapper that has access to the users session data?