I need to perform some additional tests to confirm but trying to trace through the code I can not see any paths where the CallbackHanlder defined in application-client.xml is actually used.

This may be eaiser to solve if we drop it down to an Elytron only problem as the client side should be able to operate independently of the server side.