从android http post登录到grails 3 spring security [英] login from android http post to grails 3 spring security
本文介绍了从android http post登录到grails 3 spring security的处理方法，对大家解决问题具有一定的参考价值，需要的朋友们下面随着小编来一起学习吧！
问题描述
例如：我在端口8080上运行我的grails应用程序， localhost：8080 然后我使用 POSTMAN 并传递这样的参数..
它像这样的成功..
< img src =https://i.stack.imgur.com/3bKGu.pngalt =在这里输入图片描述>
但为什么我无法登录我的Android应用程序。
像这样..
public static String performPostCall（String requestURL，
HashMap< String，String> postDataParams）{
Log.d（url =，requestURL）;
网址;
String response =;
尝试{
url = new URL（requestURL）;
HttpURLConnection conn =（HttpURLConnection）url.openConnection（）;
conn.setReadTimeout（45000）;
conn.setConnectTimeout（45000）;
conn.setRequestMethod（POST）;
conn.setRequestProperty（Content-Type，form-data）;
conn.setDoInput（true）;
conn.setDoOutput（true）;
OutputStream os = conn.getOutputStream（）;
BufferedWriter writer = new BufferedWriter（
new OutputStreamWriter（os，UTF-8））;
writer.write（getPostDataString（postDataParams））;
writer.flush（）;
writer.close（）;
os.close（）;
int responseCode = conn.getResponseCode（）;
System.out.println（。toString（）=+ responseCode）;
System.out.println（。HttpsURLConnection.HTTP_OK =+ HttpsURLConnection.HTTP_OK）;
if（responseCode == HttpsURLConnection.HTTP_OK）{
String line;
BufferedReader br = new BufferedReader（new InputStreamReader（conn.getInputStream（）））; （（line = br.readLine（））！= null）{
response + = line;
while
}
}
else {
response =;
}
} catch（Exception e）{
e.printStackTrace（）;
}
返回响应;
private static String getPostDataString（HashMap< String，String> params）throws UnsupportedEncodingException {
StringBuilder result = new StringBuilder（）;
boolean first = true; （Map.Entry< String，String> entry：params.entrySet（））{
Log.d（entry.getKey（）=，entry.getKey（））;
Log.d（entry.getValue（）=，entry.getValue（））;
if（first）
first = false;
else
result.append（&）;
result.append（URLEncoder.encode（entry.getKey（），UTF-8））;
result.append（=）;
result.append（URLEncoder.encode（entry.getValue（），UTF-8））;
}
System.out.println（tetstes =+ result.toString（））;
return result.toString（）;
}
然后
protected void void doInBackground（Void ... params）{
// TODO自动生成的方法存根
HashMap< String，String>参数= new HashMap< String，String>（）;
parameter.put（username，username）;
parameter.put（password，password）;
try {
response = MyHttpURLConnection.performPostCall（URL，parameter）;
} catch（Exception e）{
System.out.println（assdfdsf =+ e）;
// TODO自动生成的catch块
e.printStackTrace（）;
}
返回null;
}
它始终在 def ajaxSuccess SpringSecurityServlet.getCurrentUser（）像这样。
def ajaxSuccess（）{
// printlnadf =+ springSecurityService.authentication.username
printlncookies =+ session.id
def cifus = springSecurityService.getCurrentUser（）
printlncifus =+ cifus
// printlnadf =+ springSecurityService。 principal.id
def user = com.vastpalaso.security.User.findByUsername（springSecurityService.authentication.name）
def userDetails = com.vastpalaso.security.UserDetails.findByUser（user）
def cifUser = corporateUserService.getCurrentCifUser（）
printlnuser =+ user
// printlncif user =+ cifUser
// printlncif user =+ cifUser .cif.corpName
// if（cifUser）{
// session.setAttribute（company，cifUser.cif.corpName）
// if（new Date（）> cifUser.cif.expireDate）{
// redirect（controller：error，action：serverError）
//}
//}
//
// if（userDetails.isLogin.equals 1））{
// def sessionx = HttpSessionCollector.find（userDetails.sessionId）
// if（sessionx）{
// sessionx.invalidate（）
/ / HttpSessionCollector.remove（userDetails.sessionId）
//}
//}
尝试{
def ipAddress = request。 （！ipAddress）{
ipAddress = request.getHeader（X-Forwarded-For）
}
if（！ipAddress）getHeader（Client-IP）
{
ipAddress = request.getRemoteAddr（）
}
尝试{
cifService.resetTryLoginAddInfo（use （例外e）{
printlne =+ e
}
session.setAttribute（别名 ，userDetails.userAlias）
session.setAttribute（fullName，userDetails.firstName ++ userDetails.lastName）
session.setAttribute（change，userDetails.forceChangePassword）
session。 （userDetails.language！= null）{
session [org.springframework.web.servlet.i18n.SessionLocaleResolver。 LOCALE（userDetails.language）
}
else {
session [org.springframework.web.servlet.i18n.SessionLocaleResolver.LOCALE_SESSION_ATTRIBUTE_NAME] = new Locale（id）
}
buildMenuList（）
if（params.callback）{
render$ {params.callback}（$ {[ ）成功：true，id：userDetails.id，更改：userDetails.forceChangePassword，用户名：springSecurityService.authentication.name，全名：（userDetails.firstName ++ userDetails.lastName）]作为JSON}）
}
else {
render（[success：true，id：userDetails.id，change：userDetails.forceChangePassword，username：springSecurityService.authentication.name，fullName：（userDetails.firstName ++ userDetails.lastName） ]作为JSON）
}
}
//捕获未知的RuntimeException，重定向到Error 500服务器错误页面
catch（RuntimeException e）{
logger.error（e .getMessage（），e）
重定向（controller：error，action：serverError）
return
}
render（[success：true，username：authentication。名称]为JSON）
}
但我总是得到这个错误日志。
DEBUG org.springframew ork.security.web.FilterChainProxy - / login / ajaxSuccess到达附加过滤器链的末尾;进行原始链接
cookies = F866B5D4267DD54163C93FD3DB1EADB5
cifus = null
错误org.grails.web.errors.GrailsExceptionResolver - 处理请求时发生MissingPropertyException：[GET] / login / ajaxSuccess
没有这样的属性：id为class：org.springframework.security.core.userdetails.User。 Stacktrace如下：
groovy.lang.MissingPropertyException：没有这样的属性：id为class：org.springframework.security.core.userdetails.User
at com.vastpalaso.CorporateUserService.getCurrentCifUser（CorporateUserService.groovy：950 ）〜[main /：na]
at accounter.LoginController $$ EQ0tGOPB.ajaxSuccess（LoginController.groovy：168）〜[na：na]
at grails.plugin.springsecurity.web.UpdateRequestContextHolderExceptionTranslationFilter.doFilter （GrailsAnonymousAuthenticationFilter.groovy：53）〜[spring-security-core-3.1.1.jar：na]
spring-security-core-3.1.1.jar：na]
在grails.plugin.springsecurity.web.authentication.logout.MutableLogoutFilter.doFilter（MutableLogoutFilter.groovy：62）〜[spring-security-core-3.1 .1.jar：na]在grails.plugin.springsecurity.web.SecurityRequestHolderFil上
[java.util.concurrent.ThreadPoolExecutor.runWorker（ThreadPoolExecutor.java:1142）〜[na]
：1.8.0_111]
at java.util.concurrent.ThreadPoolExecutor $ Worker.run（ThreadPoolExecutor.java:617）〜[na：1.8.0_111]
at java.lang.Thread.run（Thread .java：745）[na：1.8.0_111]
DEBUG org.springframework.security.web.context.HttpSessionSecurityContextRepository - SecurityContext为空或内容为匿名 - 上下文不会存储在HttpSession中。
DEBUG org.springframework.security.web.context.HttpSessionSecurityContextRepository - SecurityContext为空或内容为匿名 - 上下文不会存储在HttpSession中。
DEBUG org.springframework.security.web.context.SecurityContextPersistenceFilter - SecurityContextHolder现在已被清除，因为请求处理已完成
DEBUG org.springframework.security.web.context.SecurityContextPersistenceFilter - SecurityContextHolder现已清除，因为请求处理已完成
这是日志
DEBUG org.springframework.security.web.FilterChainProxy - / login / authenticate？spring-security-redirect = / login / ajaxSuccess在附加过滤器链中的位置1的9处;在过滤器的另一个链中，位置1的第1个位置上的spring-security-redirect = / login / authenticate？spring-security-redirect = / login / ajaxSuccess过滤器：'SecurityRequestHolderFilter'
DEBUG org.springframework.security.web.FilterChainProxy;在另一个过滤器链中，第2个位置的第2个位置为/admin/ajaxSuccess。在另一个过滤器链中，在位置2的9位置处弹出安全重定向= / login / authenticate？spring-security-redirect = / login / ajaxSuccess。发射过滤器：'SecurityContextPersistenceFilter'
DEBUG org.springframework.security.web.context.HttpSessionSecurityContextRepository - 目前不存在HttpSession
DEBUG org.springframework.security.web.context.HttpSessionSecurityContextRepository - 目前不存在HttpSession
DEBUG org.springframework.security.web.context.HttpSessionSecurityContextRepository - HttpSession中没有SecurityContext：null。一个新的将被创建。
DEBUG org.springframework.security.web.context.HttpSessionSecurityContextRepository - HttpSession中没有SecurityContext可用：null。一个新的将被创建。
DEBUG org.springframework.security.web.FilterChainProxy - / login / authenticate？spring-security-redirect = / login / ajaxSuccess在附加过滤器链中位置3的9处;在另一个过滤器链中，在位置3中的第3位上弹出过滤器：'MutableLogoutFilter'
DEBUG org.springframework.security.web.FilterChainProxy - / login / authenticate？spring-security-redirect = / login / ajaxSuccess发射过滤器：'MutableLogoutFilter'
DEBUG org.springframework.security.web.util.matcher.AntPathRequestMatcher - 检查请求匹配：'/ login / authenticate';针对'/ logoff'
DEBUG org.springframework.security.web.util.matcher.AntPathRequestMatcher - 检查请求匹配：'/ login / authenticate'; '/ logoff'
DEBUG org.springframework.security.web.FilterChainProxy - / login / authenticate？spring-security-redirect = / login / ajaxSuccess在9位的第4位，位于附加的过滤器链中;在另外的过滤器链中，第9位的第4位的spring-security-redirect = / login / authenticate？spring-security-redirect = / login / authenticate？开发过滤器：'GrailsUsernamePasswordAuthenticationFilter'
DEBUG org.springframework.security.authentication.ProviderManager - 使用org.springframework.security.authentication.dao.DaoAuthenticationProvider进行身份验证尝试
DEBUG org.springframework.security.authentication.ProviderManager - 使用org.springframework.security.authentication.dao.DaoAuthenticationProvider
进行身份验证尝试DEBUG org.springframework.security.authentication.dao.DaoAuthenticationProvider - 未找到用户
DEBUG org.springframework.security.authentication.dao .DaoAuthenticationProvider - 用户'找不到
DEBUG org.springframework.security.web.authentication.rememberme.TokenBasedRememberMeServices - 交互式登录尝试失败。
DEBUG org.springframework.security.web.authentication.rememberme.TokenBasedRememberMeServices - 交互式登录尝试失败。
DEBUG org.springframework.security.web.authentication.rememberme.TokenBasedRememberMeServices - 取消cookie
DEBUG org.springframework.security.web.authentication.rememberme.TokenBasedRememberMeServices - 取消cookie
DEBUG org.springframework .security.web.context.HttpSessionSecurityContextRepository - SecurityContext为空或内容为匿名 - 上下文不会存储在HttpSession中。
DEBUG org.springframework.security.web.context.HttpSessionSecurityContextRepository - SecurityContext为空或内容为匿名 - 上下文不会存储在HttpSession中。
DEBUG org.springframework.security.web.context.SecurityContextPersistenceFilter - SecurityContextHolder现在已被清除，因为请求处理已完成
DEBUG org.springframework.security.web.context.SecurityContextPersistenceFilter - SecurityContextHolder现已清除，因为请求处理已完成
DEBUG org.springframework.security.web.util.matcher.AntPathRequestMatcher - 检查请求匹配：'/ login / authfail';反对'/ assets / **'
DEBUG org.springframework.security.web.util.matcher.AntPathRequestMatcher - 检查请求的匹配：'/ login / authfail';反对'/ assets / **'
DEBUG org.springframework.security.web.util.matcher.AntPathRequestMatcher - 检查请求的匹配：'/ login / authfail';反对'/ ** / js / **'
DEBUG org.springframework.security.web.util.matcher.AntPathRequestMatcher - 检查请求匹配：'/ login / authfail';反对'/ ** / js / **'
DEBUG org.springframework.security.web.util.matcher.AntPathRequestMatcher - 检查请求匹配：'/ login / authfail';针对'/ ** / css / **'
DEBUG org.springframework.security.web.util.matcher.AntPathRequestMatcher - 检查请求匹配：'/ login / authfail';针对'/ ** / css / **'
DEBUG org.springframework.security.web.util.matcher.AntPathRequestMatcher - 检查请求匹配：'/ login / authfail';反对'/ ** / images / **'
DEBUG org.springframework.security.web.util.matcher.AntPathRequestMatcher - 检查请求匹配：'/ login / authfail';反对'/ ** / images / **'
DEBUG org.springframework.security.web.util.matcher.AntPathRequestMatcher - 检查请求匹配：'/ login / authfail';反对'/**/favicon.ico'
DEBUG org.springframework.security.web.util.matcher.AntPathRequestMatcher - 检查请求匹配：'/ login / authfail';反对'/**/favicon.ico'
DEBUG org.springframework.security.web.util.matcher.AntPathRequestMatcher - 通过通用模式匹配'/ login / authfail'/ **'
DEBUG org.springframework.security.web.util.matcher.AntPathRequestMatcher - 通过通用模式'/ **'匹配请求'/ login / authfail'
DEBUG org.springframework.security.web.FilterChainProxy - / login / authfail？在额外的过滤器链中，位置1处的login_error = 1;安装过滤器：'SecurityRequestHolderFilter'
DEBUG org.springframework.security.web.FilterChainProxy - / login / authfail？login_error = 1位于附加过滤器链中的第1位;安装过滤器：'SecurityRequestHolderFilter'
DEBUG org.springframework.security.web.FilterChainProxy - / login / authfail？login_error = 1在附加过滤器链中位置2的9处;在另外的过滤器链中，在9的位置2上的/ login / authfail？login_error = 1;发射过滤器：'SecurityContextPersistenceFilter'
DEBUG org.springframework.security.web.context.HttpSessionSecurityContextRepository - 目前不存在HttpSession
DEBUG org.springframework.security.web.context.HttpSessionSecurityContextRepository - 目前不存在HttpSession
DEBUG org.springframework.security.web.context.HttpSessionSecurityContextRepository - HttpSession中没有SecurityContext：null。一个新的将被创建。
DEBUG org.springframework.security.web.context.HttpSessionSecurityContextRepository - HttpSession中没有SecurityContext可用：null。一个新的将被创建。
DEBUG org.springframework.security.web.FilterChainProxy - / login / authfail？login_error = 1位于附加过滤器链中的第9位;在另一个过滤器链中，位于第3位的第3个位置处的登录错误= / login / authfail？login_error = 1;发射过滤器：'MutableLogoutFilter'
DEBUG org.springframework.security.web.util.matcher.AntPathRequestMatcher - 检查请求匹配：'/ login / authfail';反对'/注销'
DEBUG org.springframework.security.web.util.matcher.AntPathRequestMatcher - 检查请求匹配：'/ login / authfail';反对'/ logoff'
DEBUG org.springframework.security.web.FilterChainProxy - / login / authfail？login_error = 1在第9位的另一个过滤器链中;在另外的过滤器链中，9位的第4位的login_error = 1; / login / authfail？login_error = 1。在另一个过滤器链中，位于第5位的9个位置处的登录错误= 1; / login / authfail？login_error = 1;在另一个过滤器链中，在第9位的第5个位置使用/ login / authfail？login_error = 1;在另外的过滤器链中，位于第9位的第6位的login_error = 1; / login / authfail？login_error = 1。在另外的过滤器链中，位置9的位置6处的登录错误= / login / authfail？login_error = 1;在另外的过滤器链中，在第9位的第7位登录错误= / login / authfail？login_error = 1;在另外的过滤器链中，在第9位的第7个位置处登录错误= / login / authfail？login_error = 1;开发过滤器：'GrailsAnonymousAuthenticationFilter'
INFO org.springframework.security.core.SpringSecurityCoreVersion - 您正在运行Spring Security Core 4.0.3.RELEASE
INFO org.springframework.security.core.SpringSecurityCoreVersion - 您是使用Spring Security Core 4.0.3.RELEASE
DEBUG运行org.springframework.security.web.FilterChainProxy - / login / authfail？login_error = 1在附加过滤器链中第9位的第8位; FilterRequestContextHolderExceptionTranslationFilter'
DEBUG org.springframework.security.web.FilterChainProxy - / login / authfail？login_error = 1位于附加过滤器链中的第8位; FilterRequestContextHolderExceptionTranslationFilter'
DEBUG org.springframework.security.web.FilterChainProxy - / login / authfail？login_error = 1在附加过滤器链中第9位的9位; FilterSecurityInterceptor
DEBUG org.springframework.security.web.FilterChainProxy - / login / authfail？login_error = 1在附加过滤器链中第9位的9位;点击Filter：'FilterSecurityInterceptor'
DEBUG org.springframework.security.web.access.intercept.FilterSecurityInterceptor - 安全对象：FilterInvocation：URL：/ login / authfail？login_error = 1;属性：[IS_AUTHENTICATED_ANONYMOUSLY]
DEBUG org.springframework.security.web.access.intercept.FilterSecurityInterceptor - 安全对象：FilterInvocation：URL：/ login / authfail？login_error = 1;属性：[IS_AUTHENTICATED_ANONYMOUSLY]
DEBUG org.springframework.security.web.access.intercept.FilterSecurityInterceptor - 先前已验证：grails.plugin.springsecurity.authentication.GrailsAnonymousAuthenticationToken@f23b441a：主体：org.springframework.security.core.userdetails .User @ dc730200：用户名：__grails.anonymous.user__;密码保护];启用：false; AccountNonExpired：false; credentialsNonExpired：false; AccountNonLocked：false;授予权限：ROLE_ANONYMOUS;证书：[PROTECTED];已验证：true;详细信息：org.springframework.security.web.authentication.WebAuthenticationDetails@ffffe21a：RemoteIpAddress：192.168.100.9; SessionId：null;授予权限：ROLE_ANONYMOUS
DEBUG org.springframework.security.web.access.intercept.FilterSecurityInterceptor - 先前已验证：grails.plugin.springsecurity.authentication.GrailsAnonymousAuthenticationToken@f23b441a：Principal：org.springframework.security.core.userdetails。 User @ dc730200：用户名：__grails.anonymous.user__;密码保护];启用：false; AccountNonExpired：false; credentialsNonExpired：false; AccountNonLocked：false;授予权限：ROLE_ANONYMOUS;证书：[PROTECTED];已验证：true;详细信息：org.springframework.security.web.authentication.WebAuthenticationDetails@ffffe21a：RemoteIpAddress：192.168.100.9; SessionId：null;授予的权限：ROLE_ANONYMOUS
DEBUG org.springframework.security.access.hierarchicalroles.RoleHierarchyImpl - getReachableGrantedAuthorities（） - 从角色[ROLE_ANONYMOUS]可以在零个或多个步骤中达到[ROLE_ANONYMOUS]。
DEBUG org.springframework.security.access.hierarchicalroles.RoleHierarchyImpl - getReachableGrantedAuthorities（） - 从角色[ROLE_ANONYMOUS]可以在零个或多个步骤中达到[ROLE_ANONYMOUS]。
DEBUG org.springframework.security.web.access.intercept.FilterSecurityInterceptor - 授权成功
DEBUG org.springframework.security.web.access.intercept.FilterSecurityInterceptor - 授权成功
DEBUG org.springframework .security.web.access.intercept.FilterSecurityInterceptor - RunAsManager未更改身份验证对象
DEBUG org.springframework.security.web.access.intercept.FilterSecurityInterceptor - RunAsManager未更改身份验证对象
DEBUG org.springframework .security.web.FilterChainProxy - / login / authfail？login_error = 1到达附加过滤器链的末尾;继续使用原始链
DEBUG org.springframework.security.web.FilterChainProxy - / login / authfail？login_error = 1到达附加过滤器链的末尾;继续使用原始链
DEBUG org.springframework.security.web.context.HttpSessionSecurityContextRepository - SecurityContext为空或内容为匿名 - 上下文不会存储在HttpSession中。
DEBUG org.springframework.security.web.context.HttpSessionSecurityContextRepository - SecurityContext为空或内容为匿名 - 上下文不会存储在HttpSession中。
DEBUG org.springframework.security.web.context.HttpSessionSecurityContextRepository $ SaveToSessionResponseWrapper - 在
上跳过调用DEBUG org.springframework.security.web.context.HttpSessionSecurityContextRepository $ SaveToSessionResponseWrapper - 在
上跳过调用ERROR org .grails.web.errors.GrailsExceptionResolver - 处理请求时发生CannotRedirectException：[GET] / login / authfail - 参数：
login_error：1
这里不能发出重定向（..）。响应已被提交或者通过另一个重定向或直接写入响应.. Stacktrace如下：
grails.web.mapping.mvc.exceptions.CannotRedirectException：无法在此处发出重定向（..）。该响应已通过另一重定向或直接写入响应提交。
application.groovy
grails.plugin.springsecurity.userLookup.userDomainClassName ='com.vastpalaso.security.User'
grails.plugin.springsecurity.userLookup.authorityJoinClassName ='com.vastpalaso.security.UserRole'
grails.plugin.springsecurity.authority.className ='com.vastpalaso.security.Role'
grails.plugin.springsecurity.requestMap.className ='com.vastpalaso.security.RequestMap'
grails。 plugin.springsecurity.securityConfigType ='Requestmap'
grails.plugin.springsecurity.controllerAnnotations.staticRules = [
[pattern：'/'，access：['permitAll']]，
[pattern ：'/ error'，access：['permitAll']]，
[pattern：'/ index'，access：['permitAll']]，
[pattern：'/index2.gsp'， access：['permitAll']]，
[pattern：'/ shutdown'，access：['permitAll']]，
[pattern：'/ assets / **'，access：['permitAll']]，
[pattern：'/ ** / js / **'，access：['permitAll']]，
[pattern：'/ * * / css / **'，access：['permitAll']]，
[pattern：'/ ** / images / **'，access：['permitAll']]，
[pattern ：'/**/favicon.ico'，access：['permitAll']]
]
grails.plugin.springsecurity.filterChain.chainMap = [
[pattern： '/ assets / **'，过滤器：'none']，
[pattern：'/ ** / js / **'，过滤器：'none']，
[pattern：'/ * * / css / **'，filters：'none']，
[pattern：'/ ** / images / **'，filters：'none']，
[pattern：'/ * * / favicon.ico'，filters：'none']，
[pattern：'/ **'，filters：'JOINED_FILTERS']
]
在我添加以下代码后，我的错误日志变为像这样
lockquote
org.springframework.security.authentication。 dao.DaoAuthenticationProvider
- 未找到用户
关于提供的链接幻灯片6它说发射organizationFilter
当您查看安全过滤器。它们实际上就是我前面提到的那些静态规则。
所以有一些冲突存在，规则被绕过，然后尝试登录（没有用户凭证） 。
这里所有的日志只是一个正确解释的问题。
正确..
注释掉这首
// grails.plugin.springsecurity.securityConfigType ='Requestmap'
//然后添加
grails.plugin.springsecurity.controllerAnnotations.staticRules = [
[pattern：'/'，access：['permitAll']]，
[pattern：'/ error'，access：['permitAll'] ]，
[pattern：'/ index'，access：['permitAll']]，
[pattern：'/index2.gsp'，access：['permitAll']]，
[pattern：'/ shutdown'，access：['permitAll']]，
[pattern：'/ assets / **'，access：['permitAll ]]，
[pattern：'/ ** / js / **'，access：['permitAll']]，
[pattern：'/ ** / css / **'，access： ['permitAll']]，
[pattern：'/ ** / images / **'，access：['permitAll']]，
[pattern：'/**/favicon.ico' ，access：['permitAll']]，
[pattern：'/ login / ajaxSuccess'，access：['permitAll']]，
[pattern：'/ login / ajaxSuccess / **'， access：['permitAll']]，
[pattern：'/ ** / ajaxSuccess / **'，access：['permitAll']]
]
我在底部添加了3条新规则，第一条应该解决问题。但我只是把它们加了进去。然后在它上面的行你已经从注释改变到 Requestmap ，但是你有
如果你设置了某些东西，那么你需要相关的配置。
请注意，如果您希望坚持使用Requestmap，那么您可能需要配置
pre $ grafclugin.springsecurity。 interceptUrlMap = [
[pattern：'/'，access：['permitAll']]，
[pattern：'/ something / **'，access：['ROLE_ADMIN'，'ROLE_USER']] ，
[pattern：'/ **'，access：['permitAll']]，
]
现在我会坚持使用 securityConfigType：Annotation
i am trying to create an android application to do something with my database.
for example: i run my grails app on port 8080, localhost:8080 then i use POSTMAN and pass paramter like this..
it success with like this..
but why i fail to login with my android application .
like this..
public static String performPostCall(String requestURL,
HashMap<String, String> postDataParams) {
Log.d("url = ",requestURL);
URL url;
String response = "";
try {
url = new URL(requestURL);
HttpURLConnection conn = (HttpURLConnection) url.openConnection();
conn.setReadTimeout(45000);
conn.setConnectTimeout(45000);
conn.setRequestMethod("POST");
conn.setRequestProperty("Content-Type", "form-data");
conn.setDoInput(true);
conn.setDoOutput(true);
OutputStream os = conn.getOutputStream();
BufferedWriter writer = new BufferedWriter(
new OutputStreamWriter(os, "UTF-8"));
writer.write(getPostDataString(postDataParams));
writer.flush();
writer.close();
os.close();
int responseCode=conn.getResponseCode();
System.out.println(".toString() = "+responseCode);
System.out.println(".HttpsURLConnection.HTTP_OK = "+HttpsURLConnection.HTTP_OK);
if (responseCode == HttpsURLConnection.HTTP_OK) {
String line;
BufferedReader br=new BufferedReader(new InputStreamReader(conn.getInputStream()));
while ((line=br.readLine()) != null) {
response+=line;
}
}
else {
response="";
}
} catch (Exception e) {
e.printStackTrace();
}
return response;
}
private static String getPostDataString(HashMap<String, String> params) throws UnsupportedEncodingException{
StringBuilder result = new StringBuilder();
boolean first = true;
for(Map.Entry<String, String> entry : params.entrySet()){
Log.d("entry.getKey() = ",entry.getKey());
Log.d("entry.getValue() = ",entry.getValue());
if (first)
first = false;
else
result.append("&");
result.append(URLEncoder.encode(entry.getKey(), "UTF-8"));
result.append("=");
result.append(URLEncoder.encode(entry.getValue(), "UTF-8"));
}
System.out.println("tetstes = "+result.toString());
return result.toString();
}
then
protected Void doInBackground(Void... params) {
// TODO Auto-generated method stub
HashMap<String, String> parameter = new HashMap<String, String>();
parameter.put("username", username);
parameter.put("password", password);
try {
response = MyHttpURLConnection.performPostCall(URL, parameter);
} catch (Exception e) {
System.out.println("assdfdsf = "+e);
// TODO Auto-generated catch block
e.printStackTrace();
}
return null;
}
it always fail in def ajaxSuccess because i cannot get SpringSecurityServyce.principal.id
i tried to get springSecurityService.getCurrentUser() like this..
def ajaxSuccess() {
// println "adf = "+springSecurityService.authentication.username
println "cookies = "+session.id
def cifus = springSecurityService.getCurrentUser()
println "cifus = "+cifus
// println "adf = "+springSecurityService.principal.id
def user = com.vastpalaso.security.User.findByUsername(springSecurityService.authentication.name)
def userDetails = com.vastpalaso.security.UserDetails.findByUser(user)
def cifUser = corporateUserService.getCurrentCifUser()
println "user = "+user
// println "cif user = "+cifUser
// println "cif user = "+cifUser.cif.corpName
// if(cifUser){
// session.setAttribute("company",cifUser.cif.corpName)
// if(new Date() >cifUser.cif.expireDate ){
// redirect(controller: "error", action: "serverError")
// }
// }
//
// if (userDetails.isLogin.equals("1")) {
// def sessionx = HttpSessionCollector.find(userDetails.sessionId)
// if (sessionx) {
// sessionx.invalidate()
// HttpSessionCollector.remove(userDetails.sessionId)
// }
// }
try {
def ipAddress = request.getHeader("Client-IP")
if (!ipAddress) {
ipAddress = request.getHeader("X-Forwarded-For")
}
if (!ipAddress) {
ipAddress = request.getRemoteAddr()
}
try{
cifService.resetTryLoginAddInfo(userDetails, ipAddress, session.id)
}catch (Exception e){
println "e = "+e
}
session.setAttribute("alias", userDetails.userAlias)
session.setAttribute("fullName", userDetails.firstName + " " + userDetails.lastName)
session.setAttribute("change", userDetails.forceChangePassword)
session.setAttribute("userType", userDetails.userType)
if(userDetails.language != null){
session[org.springframework.web.servlet.i18n.SessionLocaleResolver.LOCALE_SESSION_ATTRIBUTE_NAME] = new Locale(userDetails.language)
}
else{
session[org.springframework.web.servlet.i18n.SessionLocaleResolver.LOCALE_SESSION_ATTRIBUTE_NAME] = new Locale("id")
}
buildMenuList()
if (params.callback) {
render"${params.callback} (${[success: true,id: userDetails.id ,change: userDetails.forceChangePassword, username: springSecurityService.authentication.name, fullName: (userDetails.firstName + " " + userDetails.lastName)] as JSON})"
}
else {
render([success: true,id: userDetails.id, change: userDetails.forceChangePassword, username: springSecurityService.authentication.name, fullName: (userDetails.firstName + " " + userDetails.lastName)] as JSON)
}
}
//catch unknown RuntimeException, redirect to Error 500 server Error page
catch (RuntimeException e) {
logger.error(e.getMessage(), e)
redirect(controller: "error", action: "serverError")
return
}
render([success: true, username: authentication.name] as JSON)
}
but i always get this error log.
DEBUG org.springframework.security.web.FilterChainProxy - /login/ajaxSuccess reached end of additional filter chain; proceeding with original chain
cookies = F866B5D4267DD54163C93FD3DB1EADB5
cifus = null
ERROR org.grails.web.errors.GrailsExceptionResolver - MissingPropertyException occurred when processing request: [GET] /login/ajaxSuccess
No such property: id for class: org.springframework.security.core.userdetails.User. Stacktrace follows:
groovy.lang.MissingPropertyException: No such property: id for class: org.springframework.security.core.userdetails.User
at com.vastpalaso.CorporateUserService.getCurrentCifUser(CorporateUserService.groovy:950) ~[main/:na]
at accounter.LoginController$$EQ0tGOPB.ajaxSuccess(LoginController.groovy:168) ~[na:na]
at grails.plugin.springsecurity.web.UpdateRequestContextHolderExceptionTranslationFilter.doFilter(UpdateRequestContextHolderExceptionTranslationFilter.groovy:64) ~[spring-security-core-3.1.1.jar:na]
at grails.plugin.springsecurity.web.filter.GrailsAnonymousAuthenticationFilter.doFilter(GrailsAnonymousAuthenticationFilter.groovy:53) ~[spring-security-core-3.1.1.jar:na]
at grails.plugin.springsecurity.web.authentication.logout.MutableLogoutFilter.doFilter(MutableLogoutFilter.groovy:62) ~[spring-security-core-3.1.1.jar:na]
at grails.plugin.springsecurity.web.SecurityRequestHolderFilter.doFilter(SecurityRequestHolderFilter.groovy:58) ~[spring-security-core-3.1.1.jar:na]
at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142) ~[na:1.8.0_111]
at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617) ~[na:1.8.0_111]
at java.lang.Thread.run(Thread.java:745) [na:1.8.0_111]
DEBUG org.springframework.security.web.context.HttpSessionSecurityContextRepository - SecurityContext is empty or contents are anonymous - context will not be stored in HttpSession.
DEBUG org.springframework.security.web.context.HttpSessionSecurityContextRepository - SecurityContext is empty or contents are anonymous - context will not be stored in HttpSession.
DEBUG org.springframework.security.web.context.SecurityContextPersistenceFilter - SecurityContextHolder now cleared, as request processing completed
DEBUG org.springframework.security.web.context.SecurityContextPersistenceFilter - SecurityContextHolder now cleared, as request processing completed
this is the log
DEBUG org.springframework.security.web.FilterChainProxy - /login/authenticate?spring-security-redirect=/login/ajaxSuccess at position 1 of 9 in additional filter chain; firing Filter: 'SecurityRequestHolderFilter'
DEBUG org.springframework.security.web.FilterChainProxy - /login/authenticate?spring-security-redirect=/login/ajaxSuccess at position 1 of 9 in additional filter chain; firing Filter: 'SecurityRequestHolderFilter'
DEBUG org.springframework.security.web.FilterChainProxy - /login/authenticate?spring-security-redirect=/login/ajaxSuccess at position 2 of 9 in additional filter chain; firing Filter: 'SecurityContextPersistenceFilter'
DEBUG org.springframework.security.web.FilterChainProxy - /login/authenticate?spring-security-redirect=/login/ajaxSuccess at position 2 of 9 in additional filter chain; firing Filter: 'SecurityContextPersistenceFilter'
DEBUG org.springframework.security.web.context.HttpSessionSecurityContextRepository - No HttpSession currently exists
DEBUG org.springframework.security.web.context.HttpSessionSecurityContextRepository - No HttpSession currently exists
DEBUG org.springframework.security.web.context.HttpSessionSecurityContextRepository - No SecurityContext was available from the HttpSession: null. A new one will be created.
DEBUG org.springframework.security.web.context.HttpSessionSecurityContextRepository - No SecurityContext was available from the HttpSession: null. A new one will be created.
DEBUG org.springframework.security.web.FilterChainProxy - /login/authenticate?spring-security-redirect=/login/ajaxSuccess at position 3 of 9 in additional filter chain; firing Filter: 'MutableLogoutFilter'
DEBUG org.springframework.security.web.FilterChainProxy - /login/authenticate?spring-security-redirect=/login/ajaxSuccess at position 3 of 9 in additional filter chain; firing Filter: 'MutableLogoutFilter'
DEBUG org.springframework.security.web.util.matcher.AntPathRequestMatcher - Checking match of request : '/login/authenticate'; against '/logoff'
DEBUG org.springframework.security.web.util.matcher.AntPathRequestMatcher - Checking match of request : '/login/authenticate'; against '/logoff'
DEBUG org.springframework.security.web.FilterChainProxy - /login/authenticate?spring-security-redirect=/login/ajaxSuccess at position 4 of 9 in additional filter chain; firing Filter: 'GrailsUsernamePasswordAuthenticationFilter'
DEBUG org.springframework.security.web.FilterChainProxy - /login/authenticate?spring-security-redirect=/login/ajaxSuccess at position 4 of 9 in additional filter chain; firing Filter: 'GrailsUsernamePasswordAuthenticationFilter'
DEBUG org.springframework.security.authentication.ProviderManager - Authentication attempt using org.springframework.security.authentication.dao.DaoAuthenticationProvider
DEBUG org.springframework.security.authentication.ProviderManager - Authentication attempt using org.springframework.security.authentication.dao.DaoAuthenticationProvider
DEBUG org.springframework.security.authentication.dao.DaoAuthenticationProvider - User '' not found
DEBUG org.springframework.security.authentication.dao.DaoAuthenticationProvider - User '' not found
DEBUG org.springframework.security.web.authentication.rememberme.TokenBasedRememberMeServices - Interactive login attempt was unsuccessful.
DEBUG org.springframework.security.web.authentication.rememberme.TokenBasedRememberMeServices - Interactive login attempt was unsuccessful.
DEBUG org.springframework.security.web.authentication.rememberme.TokenBasedRememberMeServices - Cancelling cookie
DEBUG org.springframework.security.web.authentication.rememberme.TokenBasedRememberMeServices - Cancelling cookie
DEBUG org.springframework.security.web.context.HttpSessionSecurityContextRepository - SecurityContext is empty or contents are anonymous - context will not be stored in HttpSession.
DEBUG org.springframework.security.web.context.HttpSessionSecurityContextRepository - SecurityContext is empty or contents are anonymous - context will not be stored in HttpSession.
DEBUG org.springframework.security.web.context.SecurityContextPersistenceFilter - SecurityContextHolder now cleared, as request processing completed
DEBUG org.springframework.security.web.context.SecurityContextPersistenceFilter - SecurityContextHolder now cleared, as request processing completed
DEBUG org.springframework.security.web.util.matcher.AntPathRequestMatcher - Checking match of request : '/login/authfail'; against '/assets/**'
DEBUG org.springframework.security.web.util.matcher.AntPathRequestMatcher - Checking match of request : '/login/authfail'; against '/assets/**'
DEBUG org.springframework.security.web.util.matcher.AntPathRequestMatcher - Checking match of request : '/login/authfail'; against '/**/js/**'
DEBUG org.springframework.security.web.util.matcher.AntPathRequestMatcher - Checking match of request : '/login/authfail'; against '/**/js/**'
DEBUG org.springframework.security.web.util.matcher.AntPathRequestMatcher - Checking match of request : '/login/authfail'; against '/**/css/**'
DEBUG org.springframework.security.web.util.matcher.AntPathRequestMatcher - Checking match of request : '/login/authfail'; against '/**/css/**'
DEBUG org.springframework.security.web.util.matcher.AntPathRequestMatcher - Checking match of request : '/login/authfail'; against '/**/images/**'
DEBUG org.springframework.security.web.util.matcher.AntPathRequestMatcher - Checking match of request : '/login/authfail'; against '/**/images/**'
DEBUG org.springframework.security.web.util.matcher.AntPathRequestMatcher - Checking match of request : '/login/authfail'; against '/**/favicon.ico'
DEBUG org.springframework.security.web.util.matcher.AntPathRequestMatcher - Checking match of request : '/login/authfail'; against '/**/favicon.ico'
DEBUG org.springframework.security.web.util.matcher.AntPathRequestMatcher - Request '/login/authfail' matched by universal pattern '/**'
DEBUG org.springframework.security.web.util.matcher.AntPathRequestMatcher - Request '/login/authfail' matched by universal pattern '/**'
DEBUG org.springframework.security.web.FilterChainProxy - /login/authfail?login_error=1 at position 1 of 9 in additional filter chain; firing Filter: 'SecurityRequestHolderFilter'
DEBUG org.springframework.security.web.FilterChainProxy - /login/authfail?login_error=1 at position 1 of 9 in additional filter chain; firing Filter: 'SecurityRequestHolderFilter'
DEBUG org.springframework.security.web.FilterChainProxy - /login/authfail?login_error=1 at position 2 of 9 in additional filter chain; firing Filter: 'SecurityContextPersistenceFilter'
DEBUG org.springframework.security.web.FilterChainProxy - /login/authfail?login_error=1 at position 2 of 9 in additional filter chain; firing Filter: 'SecurityContextPersistenceFilter'
DEBUG org.springframework.security.web.context.HttpSessionSecurityContextRepository - No HttpSession currently exists
DEBUG org.springframework.security.web.context.HttpSessionSecurityContextRepository - No HttpSession currently exists
DEBUG org.springframework.security.web.context.HttpSessionSecurityContextRepository - No SecurityContext was available from the HttpSession: null. A new one will be created.
DEBUG org.springframework.security.web.context.HttpSessionSecurityContextRepository - No SecurityContext was available from the HttpSession: null. A new one will be created.
DEBUG org.springframework.security.web.FilterChainProxy - /login/authfail?login_error=1 at position 3 of 9 in additional filter chain; firing Filter: 'MutableLogoutFilter'
DEBUG org.springframework.security.web.FilterChainProxy - /login/authfail?login_error=1 at position 3 of 9 in additional filter chain; firing Filter: 'MutableLogoutFilter'
DEBUG org.springframework.security.web.util.matcher.AntPathRequestMatcher - Checking match of request : '/login/authfail'; against '/logoff'
DEBUG org.springframework.security.web.util.matcher.AntPathRequestMatcher - Checking match of request : '/login/authfail'; against '/logoff'
DEBUG org.springframework.security.web.FilterChainProxy - /login/authfail?login_error=1 at position 4 of 9 in additional filter chain; firing Filter: 'GrailsUsernamePasswordAuthenticationFilter'
DEBUG org.springframework.security.web.FilterChainProxy - /login/authfail?login_error=1 at position 4 of 9 in additional filter chain; firing Filter: 'GrailsUsernamePasswordAuthenticationFilter'
DEBUG org.springframework.security.web.FilterChainProxy - /login/authfail?login_error=1 at position 5 of 9 in additional filter chain; firing Filter: 'SecurityContextHolderAwareRequestFilter'
DEBUG org.springframework.security.web.FilterChainProxy - /login/authfail?login_error=1 at position 5 of 9 in additional filter chain; firing Filter: 'SecurityContextHolderAwareRequestFilter'
DEBUG org.springframework.security.web.FilterChainProxy - /login/authfail?login_error=1 at position 6 of 9 in additional filter chain; firing Filter: 'GrailsRememberMeAuthenticationFilter'
DEBUG org.springframework.security.web.FilterChainProxy - /login/authfail?login_error=1 at position 6 of 9 in additional filter chain; firing Filter: 'GrailsRememberMeAuthenticationFilter'
DEBUG org.springframework.security.web.FilterChainProxy - /login/authfail?login_error=1 at position 7 of 9 in additional filter chain; firing Filter: 'GrailsAnonymousAuthenticationFilter'
DEBUG org.springframework.security.web.FilterChainProxy - /login/authfail?login_error=1 at position 7 of 9 in additional filter chain; firing Filter: 'GrailsAnonymousAuthenticationFilter'
INFO org.springframework.security.core.SpringSecurityCoreVersion - You are running with Spring Security Core 4.0.3.RELEASE
INFO org.springframework.security.core.SpringSecurityCoreVersion - You are running with Spring Security Core 4.0.3.RELEASE
DEBUG org.springframework.security.web.FilterChainProxy - /login/authfail?login_error=1 at position 8 of 9 in additional filter chain; firing Filter: 'UpdateRequestContextHolderExceptionTranslationFilter'
DEBUG org.springframework.security.web.FilterChainProxy - /login/authfail?login_error=1 at position 8 of 9 in additional filter chain; firing Filter: 'UpdateRequestContextHolderExceptionTranslationFilter'
DEBUG org.springframework.security.web.FilterChainProxy - /login/authfail?login_error=1 at position 9 of 9 in additional filter chain; firing Filter: 'FilterSecurityInterceptor'
DEBUG org.springframework.security.web.FilterChainProxy - /login/authfail?login_error=1 at position 9 of 9 in additional filter chain; firing Filter: 'FilterSecurityInterceptor'
DEBUG org.springframework.security.web.access.intercept.FilterSecurityInterceptor - Secure object: FilterInvocation: URL: /login/authfail?login_error=1; Attributes: [IS_AUTHENTICATED_ANONYMOUSLY]
DEBUG org.springframework.security.web.access.intercept.FilterSecurityInterceptor - Secure object: FilterInvocation: URL: /login/authfail?login_error=1; Attributes: [IS_AUTHENTICATED_ANONYMOUSLY]
DEBUG org.springframework.security.web.access.intercept.FilterSecurityInterceptor - Previously Authenticated: grails.plugin.springsecurity.authentication.GrailsAnonymousAuthenticationToken@f23b441a: Principal: org.springframework.security.core.userdetails.User@dc730200: Username: __grails.anonymous.user__; Password: [PROTECTED]; Enabled: false; AccountNonExpired: false; credentialsNonExpired: false; AccountNonLocked: false; Granted Authorities: ROLE_ANONYMOUS; Credentials: [PROTECTED]; Authenticated: true; Details: org.springframework.security.web.authentication.WebAuthenticationDetails@ffffe21a: RemoteIpAddress: 192.168.100.9; SessionId: null; Granted Authorities: ROLE_ANONYMOUS
DEBUG org.springframework.security.web.access.intercept.FilterSecurityInterceptor - Previously Authenticated: grails.plugin.springsecurity.authentication.GrailsAnonymousAuthenticationToken@f23b441a: Principal: org.springframework.security.core.userdetails.User@dc730200: Username: __grails.anonymous.user__; Password: [PROTECTED]; Enabled: false; AccountNonExpired: false; credentialsNonExpired: false; AccountNonLocked: false; Granted Authorities: ROLE_ANONYMOUS; Credentials: [PROTECTED]; Authenticated: true; Details: org.springframework.security.web.authentication.WebAuthenticationDetails@ffffe21a: RemoteIpAddress: 192.168.100.9; SessionId: null; Granted Authorities: ROLE_ANONYMOUS
DEBUG org.springframework.security.access.hierarchicalroles.RoleHierarchyImpl - getReachableGrantedAuthorities() - From the roles [ROLE_ANONYMOUS] one can reach [ROLE_ANONYMOUS] in zero or more steps.
DEBUG org.springframework.security.access.hierarchicalroles.RoleHierarchyImpl - getReachableGrantedAuthorities() - From the roles [ROLE_ANONYMOUS] one can reach [ROLE_ANONYMOUS] in zero or more steps.
DEBUG org.springframework.security.web.access.intercept.FilterSecurityInterceptor - Authorization successful
DEBUG org.springframework.security.web.access.intercept.FilterSecurityInterceptor - Authorization successful
DEBUG org.springframework.security.web.access.intercept.FilterSecurityInterceptor - RunAsManager did not change Authentication object
DEBUG org.springframework.security.web.access.intercept.FilterSecurityInterceptor - RunAsManager did not change Authentication object
DEBUG org.springframework.security.web.FilterChainProxy - /login/authfail?login_error=1 reached end of additional filter chain; proceeding with original chain
DEBUG org.springframework.security.web.FilterChainProxy - /login/authfail?login_error=1 reached end of additional filter chain; proceeding with original chain
DEBUG org.springframework.security.web.context.HttpSessionSecurityContextRepository - SecurityContext is empty or contents are anonymous - context will not be stored in HttpSession.
DEBUG org.springframework.security.web.context.HttpSessionSecurityContextRepository - SecurityContext is empty or contents are anonymous - context will not be stored in HttpSession.
DEBUG org.springframework.security.web.context.HttpSessionSecurityContextRepository$SaveToSessionResponseWrapper - Skip invoking on
DEBUG org.springframework.security.web.context.HttpSessionSecurityContextRepository$SaveToSessionResponseWrapper - Skip invoking on
ERROR org.grails.web.errors.GrailsExceptionResolver - CannotRedirectException occurred when processing request: [GET] /login/authfail - parameters:
login_error: 1
Cannot issue a redirect(..) here. The response has already been committed either by another redirect or by directly writing to the response.. Stacktrace follows:
grails.web.mapping.mvc.exceptions.CannotRedirectException: Cannot issue a redirect(..) here. The response has already been committed either by another redirect or by directly writing to the response.
application.groovy
grails.plugin.springsecurity.userLookup.userDomainClassName = 'com.vastpalaso.security.User'
grails.plugin.springsecurity.userLookup.authorityJoinClassName = 'com.vastpalaso.security.UserRole'
grails.plugin.springsecurity.authority.className = 'com.vastpalaso.security.Role'
grails.plugin.springsecurity.requestMap.className = 'com.vastpalaso.security.RequestMap'
grails.plugin.springsecurity.securityConfigType = 'Requestmap'
grails.plugin.springsecurity.controllerAnnotations.staticRules = [
[pattern: '/', access: ['permitAll']],
[pattern: '/error', access: ['permitAll']],
[pattern: '/index', access: ['permitAll']],
[pattern: '/index2.gsp', access: ['permitAll']],
[pattern: '/shutdown', access: ['permitAll']],
[pattern: '/assets/**', access: ['permitAll']],
[pattern: '/**/js/**', access: ['permitAll']],
[pattern: '/**/css/**', access: ['permitAll']],
[pattern: '/**/images/**', access: ['permitAll']],
[pattern: '/**/favicon.ico', access: ['permitAll']]
]
grails.plugin.springsecurity.filterChain.chainMap = [
[pattern: '/assets/**', filters: 'none'],
[pattern: '/**/js/**', filters: 'none'],
[pattern: '/**/css/**', filters: 'none'],
[pattern: '/**/images/**', filters: 'none'],
[pattern: '/**/favicon.ico', filters: 'none'],
[pattern: '/**', filters: 'JOINED_FILTERS']
]
after i add this below code, my error log become like this
解决方案
The issue is here:
org.springframework.security.authentication.dao.DaoAuthenticationProvider
- User '' not found
On the provided link slide 6 it says firing organizationFilter
When you look into security filters. They are actually those static rules that I mentioned earlier.
so something is of a conflict there and the rule is being bypassed then it attempts to login (with no user credentials).
It is all there in there logs just a matter of interpreting it correctly
Right.. Comment out this first
//grails.plugin.springsecurity.securityConfigType = 'Requestmap'
//Then add
grails.plugin.springsecurity.controllerAnnotations.staticRules = [
[pattern: '/', access: ['permitAll']],
[pattern: '/error', access: ['permitAll']],
[pattern: '/index', access: ['permitAll']],
[pattern: '/index2.gsp', access: ['permitAll']],
[pattern: '/shutdown', access: ['permitAll']],
[pattern: '/assets/**', access: ['permitAll']],
[pattern: '/**/js/**', access: ['permitAll']],
[pattern: '/**/css/**', access: ['permitAll']],
[pattern: '/**/images/**', access: ['permitAll']],
[pattern: '/**/favicon.ico', access: ['permitAll']],
[pattern: '/login/ajaxSuccess', access: ['permitAll']],
[pattern: '/login/ajaxSuccess/**', access: ['permitAll']],
[pattern: '/**/ajaxSuccess/**', access: ['permitAll']]
]
I haved added 3 new rules at the very bottom, the very first one should fix the issue. But I added them just incase. Then the line above it you have changed from annotation to Requestmap but then you have controllerAnnotations.staticRules you do need to pay attention to the finer details here.
If you set something to be something else then you need relevant configuration for that. Please note if you do wish to stick with Requestmap then maybe you need to configure
grails.plugin.springsecurity.interceptUrlMap = [
[pattern: '/', access: ['permitAll']],
[pattern: '/something/**', access: ['ROLE_ADMIN', 'ROLE_USER']],
[pattern: '/**', access: ['permitAll']],
]
For now I would stick with securityConfigType: Annotation
这篇关于从android http post登录到grails 3 spring security的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！
查看全文
![< img src =https://i.stack.imgur.com/3bKGu.pngalt =在这里输入图片描述>](\"https://i.stack.imgur.com/3bKGu.png\"){kind=link}