Provide a simple, secure way of sharing identity and role information to REST APIs based on OpenID Connect

Portlet-based modules have access to this information automatically, but non-portlet (Servlet-based) APIs need a way to get it too.