public controller in a token based security app

56 views
Skip to first unread message

Behrad Zari

unread,
Nov 30, 2014, 10:02:51 AM11/30/14
to spring-sec...@googlegroups.com
I've set up an app with the following config, however I'm not able to define a public controller for user signup, since it's url (app/register/index) returns 401.

My Controller Class:

@Secured('permitAll')
class RegisterController {

    def index() {
        println( "I'm public!")
        return "index"
    }
}


My Config.groovy:

grails.plugin.springsecurity.userLookup.userDomainClassName = 'io.aban.ovp.model.security.User'
grails.plugin.springsecurity.userLookup.authorityJoinClassName = 'io.aban.ovp.model.security.UserRole'
grails.plugin.springsecurity.authority.className = 'io.aban.ovp.model.security.Role'

grails.plugin.springsecurity.rejectIfNoRule = false

grails.plugin.springsecurity.securityConfigType = 'Annotation'
grails.plugin.springsecurity.controllerAnnotations.staticRules = [
        '/':                              ['permitAll'],
        '/index':                         ['permitAll'],
        '/index.gsp':                     ['permitAll'],
        '/**/js/**':                      ['permitAll'],
        '/**/css/**':                     ['permitAll'],
        '/**/images/**':                  ['permitAll'],
        '/**/favicon.ico':                ['permitAll'],
        '/register/**':                     ['permitAll']
]

grails.plugin.springsecurity.rememberMe.persistent = false
grails.plugin.springsecurity.rest.login.useJsonCredentials = true
grails.plugin.springsecurity.rest.login.failureStatusCode = 401
grails.plugin.springsecurity.rest.token.storage.useGorm = true
grails.plugin.springsecurity.rest.token.storage.gorm.tokenDomainClassName = 'io.aban.ovp.model.security.AuthenticationToken'
grails.plugin.springsecurity.rest.token.storage.gorm.tokenValuePropertyName = 'token'
grails.plugin.springsecurity.rest.token.storage.gorm.usernamePropertyName = 'username'
grails.plugin.springsecurity.rest.token.validation.useBearerToken = false

cors.headers = [
    'Access-Control-Allow-Headers': 'origin, authorization, accept, content-type, x-requested-with, X-Auth-Token'
]

Alvaro Sanchez-Mariscal

unread,
Dec 8, 2014, 6:00:13 AM12/8/14
to Behrad Zari, spring-sec...@googlegroups.com
Hi Behrad,

Can you please setup anonymous access as specified in http://alvarosanchez.github.io/grails-spring-security-rest/docs/guide/tokenValidation.html, and try again?

Cheers.

--
Spring Security REST
http://alvarosanchez.github.io/grails-spring-security-rest/
---
You received this message because you are subscribed to the Google Groups "Spring Security REST" group.
To unsubscribe from this group and stop receiving emails from it, send an email to spring-security-...@googlegroups.com.
To post to this group, send email to spring-sec...@googlegroups.com.
Visit this group at http://groups.google.com/group/spring-security-rest.
To view this discussion on the web, visit https://groups.google.com/d/msgid/spring-security-rest/8b66c48c-4092-4c1c-8d55-72d28d228a45%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.



--
Reply all
Reply to author
Forward
0 new messages