getPrincipals() typing

[Klingenstein, Nate]

> I don't know how you could do that by accident. Nothing in the IdP would ever cause that to happen.

Not worried about accidents.  It is exposed-ish to the client, which is an accident waiting to happen.  That's where I join the flow along with users and back buttons.

> If you're trying to debug it by running those flows by themselves, that's not going to work. The contracts require that the context tree is set up in the right way or the actions will simply fail.

No, I didn't try that.  Of all the insane things I did, I didn't try that.  I'm curious now, but my testbed is several screens and a night of sleep away.

> Also, if you're trying to debug this outside of Eclipse using the testbed we have, then that would also be a big mistake. I work inside that exclusively.

I do get generally how things are assembled at this point, but getting an IDE working will be right after I get git.  I have a big, fat, empty parent project and a pom staring back at me right now.

> I'm not saying you can understand what I did by reading it, but I am saying you can't understand what I did without reading it.

After 10 years, I understand that, I assure you.  I just don't have the sense to stop there.

People are just going to treat the 3.3 authentication stuff as a black box, but none of this is really a black box.  You would have to strip out a ton of features to get to -For-Dummies, which is all I did.  I was actually relieved to see it still follows the same contracts, but I didn't feel that way 3 days ago.

Everything I built is decoupled from a specific vendor implementation.