../../../../../jakarta/security/enterprise/identitystore/CredentialValidationResult.Status.html#VALID"><code>CredentialValidationResult.Status.VALID</code></a>, the <a href="../../../../../../jakarta/security/enterprise/CallerPrincipal.html" title="class in jakarta.security.enterprise"><code>CallerPrincipal</code></a> and groups are obtained from the
 <code>CredentialValidationResult</code> and passed into 
 <a href="../../../../../../jakarta/security/enterprise/authentication/mechanism/http/HttpMessageCont