...
[12:15:57 CST(-0600)] <ries> I am a bit confused how this goes, for example , should I create a UsernameTicketCredentials class?
[12:17:18 CST(-0600)] <ries> since I never used web flow I am almost leaning towards just hacking it into a AbstractUsernamePasswordAuthenticationHandler and get the request data from somewhere, but that can't be right?