Authentication message handling on expired challenge

[GoogleCodeExporter]

What steps will reproduce the problem?
1. start eid authentication
2. user waits more then 5 minutes ( DEFAULT_MAX_MATURITY ) to enter his pin code
3. => throw new SecurityException("maximum challenge maturity reached");

What is the expected output? What do you see instead?

This exception gets wrapped in a servletexception together will other 
exceptions like authn signature invalid etc.
Think this exception should be a custom one so we can handle it at another 
level to display a message like challenge expired instead of a generic error.

@ AuthenticationChallenge.getAuthnChallenge

Original issue reported on code.google.com by wim.vand...@gmail.com on 25 Sep 2012 at 7:03