How to implement a custom delegation token

Question

I have the following scenario:

• I have an HTTP service where I have a logged in user with a keytab and a kerberos principal - let\'s name this user for the s