grails-spring-security-rest | Grails plugin to implement token | Authentication library

by grails-plugins Groovy Version: 3.0.0.RC1 License: Non-SPDX

X-Ray Key Features Code Snippets Community Discussions(9)Vulnerabilities Install Support

kandi X-RAY | grails-spring-security-rest Summary

grails-spring-security-rest is a Groovy library typically used in Security, Authentication, Spring Boot, Spring applications. grails-spring-security-rest has no bugs, it has no vulnerabilities and it has low support. However grails-spring-security-rest has a Non-SPDX License. You can download it from GitHub.

Spring Security REST for Grails.

Support

Quality

Security

License

Reuse

Support

grails-spring-security-rest has a low active ecosystem.

It has 199 star(s) with 115 fork(s). There are 24 watchers for this library.

It had no major release in the last 12 months.

There are 11 open issues and 320 have been closed. On average issues are closed in 437 days. There are 12 open pull requests and 0 closed requests.

It has a neutral sentiment in the developer community.

The latest version of grails-spring-security-rest is 3.0.0.RC1

Quality

grails-spring-security-rest has 0 bugs and 0 code smells.

Security

grails-spring-security-rest has no vulnerabilities reported, and its dependent libraries have no vulnerabilities reported.

grails-spring-security-rest code analysis shows 0 unresolved vulnerabilities.

There are 0 security hotspots that need review.

License

grails-spring-security-rest has a Non-SPDX License.

Non-SPDX licenses can be open source with a non SPDX compliant license, or non open source licenses, and you need to review them closely before use.

Reuse

grails-spring-security-rest releases are available to install and integrate.

Installation instructions are not available. Examples and code snippets are available.

Top functions reviewed by kandi - BETA

kandi's functional review helps you automatically verify the functionalities of the libraries and avoid rework.
Currently covering the most popular Java, JavaScript and Python libraries. See a Sample of grails-spring-security-rest

Get all kandi verified functions for this library.

grails-spring-security-rest Key Features

No Key Features are available at this moment for grails-spring-security-rest.

grails-spring-security-rest Examples and Code Snippets

No Code Snippets are available at this moment for grails-spring-security-rest.

Community Discussions

Trending Discussions on grails-spring-security-rest

A component required a bean named '' that could not be found

Grails - grails-spring-security-rest - Impossible to load jwt secret from application.yml

Getting 'Cannot invoke method loadUserByUsername() on null object' in grails spring security rest

Grails 2.5.4 / Spring Security Rest 1.5.4 - Validating token

Secured users created in grails integration test are unauthorized but bootstrapped ones are

Grails spring security rest inject tokenGenerator

Grails 3 and Spring Security: return 401 when user is not logged in

facebook connect with grails spring security rest plugin

404 when do logout in Spring Security Rest Plugin for Grails

QUESTION

A component required a bean named '' that could not be found

Asked 2020-Apr-22 at 12:17

I'm trying to build my first grails application using grails-spring-security-rest plugin following this post's instructions.

However, when I try to run the application it gives me the following output:

...

ANSWER

Answered 2017-May-09 at 18:23

Finally, I was able to fix the problem:

Issue 1: I created User Role and UserRole classes manually instead of using

Source https://stackoverflow.com/questions/43838193

QUESTION

Grails - grails-spring-security-rest - Impossible to load jwt secret from application.yml

Asked 2018-Jul-13 at 15:01

I am using the application.yml file to load runtime configurations for the grails-spring-security-rest plugin.

...

ANSWER

Answered 2018-Jul-13 at 14:14

You could create an application.groovy and a runtime.groovy in place of the yml. The external config plug-in has a script for converting from yml to Groovy config: http://plugins.grails.org/plugin/grails/external-config

Source https://stackoverflow.com/questions/51326293

QUESTION

Getting 'Cannot invoke method loadUserByUsername() on null object' in grails spring security rest

Asked 2017-Dec-27 at 10:10

I've been trying to implement Facebook OAuth from here: http://alvarosanchez.github.io/grails-spring-security-rest/latest/docs/index.html#_delegating_authentication_to_oauth_providers

I'm able to integrate OAuth and get the access token from Facebook but I'm facing problem implementing a custom OAuthUserDetailsService. I've created a custom service:

FacebookOauthUserDetails.groovy

...

ANSWER

Answered 2017-Dec-27 at 10:10

GrailsUserDetailsService is the interface basically reside in theorg.springframework.security.core.userdetails package. You can implement the loadUserByUsername method of above service (interface) in your service (class) and write a code (implementation) to get your desired data / userdetails, you can get the user details as object/list/map whatever format you want, you can find data there by GORM finder method by the given username and return that data. Below is sample example,

Service code:

Source https://stackoverflow.com/questions/47969903

QUESTION

Grails 2.5.4 / Spring Security Rest 1.5.4 - Validating token

Asked 2017-Oct-13 at 11:12

What I'm trying to do is login a user and get a token back (this part works). Then I want to validate this token every time I access an API path. I'm obviously doing something wrong, maybe I don't fully understand what the Spring Security Rest plugin is actually supposed to do but whenever I call an API path and send the token all I get back is the Spring Security login page's html. I'm using Boomerang Soap and Rest Client. Here's what I'm sending.

...

ANSWER

Answered 2017-Aug-04 at 04:34

Seems that the issue is: your url http://localhost:7070/backend3/external/user/info is not under /api/** so the regular spring security filter chain is being invoked instead of the rest api filter chain.

Try

Source https://stackoverflow.com/questions/45492324

QUESTION

Secured users created in grails integration test are unauthorized but bootstrapped ones are

Asked 2017-Jul-30 at 01:37

I'm using Grails Spring Security Core and the Grails Spring Security REST plugin and I'm just starting to get things set up. I initialized the plugins with a User class and an Authority class (defaults) and went to write an integration test, following a guide I found on the Grails website.

It said to put the following in an integration test:

...

ANSWER

Answered 2017-Jul-30 at 01:37

The User you create in the given section is in a transaction that has not been committed. When you make the REST call, the api/login controller will be run in a new transaction that cannot see your un-committed User.

A few options (there are others)...

Create User in BootStrap.groovy

Source https://stackoverflow.com/questions/45382718

QUESTION

Grails spring security rest inject tokenGenerator

Asked 2017-Jun-06 at 03:29

I have a similar requirement like this post mentioned. :REST spring security - Manually authenticating a new user and getting access token

According to the accepted answer, the codes will be like:

...

ANSWER

Answered 2017-Jun-06 at 03:29

Well if you want to use the "tokenGenerator" then you need to register it under the "resources.groovy" like below

Source https://stackoverflow.com/questions/44372061

QUESTION

Grails 3 and Spring Security: return 401 when user is not logged in

Asked 2017-Jun-03 at 04:43

In my Grails 3.2.9 web-app I'm using Spring Security plugin to manage user session. This is the depencency:

...

ANSWER

Answered 2017-Jun-02 at 10:26

I do not have experience in Grails but perhaps what you are looking for can be implemented by providing a different implementation of org.springframework.security.web.AuthenticationEntryPoint in your Spring security configuration. By default for form authentication Spring uses org.springframework.security.web.authentication.LoginUrlAuthenticationEntryPoint which performs redirect to the given login page. On the other hand org.springframework.security.web.authentication.HttpStatusEntryPoint just returns the desired status.

In our project entry point is set in the old fashioned way through XML configuration:

Source https://stackoverflow.com/questions/44312193

QUESTION

facebook connect with grails spring security rest plugin

Asked 2017-Apr-28 at 14:01

Seems like facebook has changed the response format of api call now my code is not working as it suppose to be. I've followed exact same steps to configure plugin mention @ plugin docs

I'm facing exact same issue mentioned in grails-spring-security-rest/issues/327

Any workaround/hints to get facebook connect work with grails-spring-security-rest plugin?

...

ANSWER

Answered 2017-Apr-28 at 14:01

https://github.com/alvarosanchez/grails-spring-security-rest/issues/327#issuecomment-296610128

Someone has posted a workaround.

Source https://stackoverflow.com/questions/43510965

QUESTION

404 when do logout in Spring Security Rest Plugin for Grails

Asked 2017-Jan-19 at 21:14

I'm setting the security system on my project (Grails - Angularjs) with Spring Security Rest Plugin v1.5.4 (using spring security core 2.0.0) for Grails 2.4.4. Doc about this plugin can be found here.

I'm testing the login and logout with postman chrome rest client and I'm able to do a login OK, but I'm getting a 404 when I do logout.

In the documentation clearly says:

The logout filter exposes an endpoint for deleting tokens. It will read the token from an HTTP header. If found, will delete it from the storage, sending a 200 response. Otherwise, it will send a 404 response

You can configure it in Config.groovy using this properties:

Config key...................................................................................Default value

grails.plugin.springsecurity.rest.logout.endpointUrl....................../api/logout grails.plugin.springsecurity.rest.token.validation.headerName....X-Auth-Token

So, after doing a login successfully, I tried to do a logout to that url (my_host_url/api/logout) with a GET method and sending a header X-Auth-Token with the token I got previously from login.

But I keep getting a 404. See image below

Edit: I'm setting the chain map like this (in order to get a stateless behavior):

...

ANSWER

Answered 2017-Jan-19 at 16:53

You missed another excerpt from the docs. It's a warning message literally before the chunk you quoted, and says:

Logout is not possible when using JWT tokens (the default strategy), as no state is kept in the server.

If you still want to have logout, you can provide your own implementation by creating a subclass of JwtTokenStorageService and overriding the methods storeToken and removeToken. Then, register your implementation in resources.groovy as tokenStorageService.

Source https://stackoverflow.com/questions/41744671

Community Discussions, Code Snippets contain sources that include Stack Exchange Network

Vulnerabilities

No vulnerabilities reported

Install grails-spring-security-rest

You can download it from GitHub.

Support

For any new features, suggestions and bugs create an issue on GitHub. If you have any questions check and ask questions on community page Stack Overflow .

Find more information at: