Hi all,
Apart from that, I expect to release a 1.4.0.RC1 including A. J. Brown's contribution on OAuth bearer tokens.
That is going to be the main topic of version 1.4: behave as close as possible to OAuth 2.0 (in fact, the plugin is already compliant with OAuth 2.0 implicit grants).
1.4 will also be the last "pure Grails" version, as I will backport all the code to plain Java and Spring Security. The goal is to be able to use those features from Java or Spring Boot.
Cheers.