我发现这是与这样一个重要主题有关的唯一问题，所以我想分享我为CXF 3.1发现的内容.x。

I found this to be the only question relating to such an important subject, so I would like to share what I found for CXF 3.1.x.

基本思路与@ alfredo-a相同。以下是代码：

The basic idea is the same as @alfredo-a illustrated. Here is the code:

Message message=PhaseInterceptorChain.getCurrentMessage();
SecurityContext context=message.get(SecurityContext.class);
String userName=context.getUserPrincipal().getName();

我希望这对某人有帮助。

I hope this is helpful to someone.

干杯！