@Override
    public String getAuthenticationScheme() {
        return containerRequestContext.getSecurityContext().getAuthenticationScheme();
    }
A Shiro based {@link SecurityContext} that exposes the current Shiro {@link Subject} as a {@link Principal}.
The {@link #isUserInRole(String)} method returns the result of {@link Subject#hasRole(String)}.

@since 1.4
support/jaxrs/src/main/java/org/apache/shiro/web/jaxrs/ShiroSecurityContext.java