{"id":74737,"date":"2019-07-18T11:00:16","date_gmt":"2019-07-18T08:00:16","guid":{"rendered":"http:\/\/examples.javacodegeeks.com\/?p=74737"},"modified":"2019-07-18T09:02:57","modified_gmt":"2019-07-18T06:02:57","slug":"grails-spring-security-tutorial","status":"publish","type":"post","link":"https:\/\/examples.javacodegeeks.com\/jvm-languages\/groovy\/grails\/grails-spring-security-tutorial\/","title":{"rendered":"Grails Spring Security Tutorial"},"content":{"rendered":"

There are many security features in Spring Security such as authentication, authorization, instance-based control, and others. Grails developers use Spring security to secure the application.<\/p>\n

\n

Table Of Contents<\/h3>\n
\n
1. Overview<\/a><\/dt>\n
2. Grails Spring Security<\/a><\/dt>\n
\n
\n
2.1. Prerequisites<\/a><\/dt>\n
2.2. Download<\/a><\/dt>\n
2.3. Setup<\/a><\/dt>\n
2.4. Running Gradle<\/a><\/dt>\n
2.5. Running Grails<\/a><\/dt>\n
2.6. HelloWorld in Grails<\/a><\/dt>\n
2.7. Testing Grails Application<\/a><\/dt>\n
2.8. Grails IDE Integration<\/a><\/dt>\n
2.9. Building with Gradle<\/a><\/dt>\n
2.10. Deploying a Grails App<\/a><\/dt>\n
2.11. Grails Spring Security<\/a><\/dt>\n<\/dl>\n<\/dd>\n
3. Download the Source Code<\/a><\/dt>\n<\/dl>\n<\/div>\n

 <\/p>\n

<\/a>1. Overview<\/h2>\n

This is an in-depth article on Grails Spring Security. Grails opensource framework is used for designing and developing full-stack applications. Spring security plugin provides spring security for Grails application. The plugin can be customized for various configuration options. Interfaces are used for extensibility.<\/p>\n

<\/a>2. Grails Spring Security<\/h2>\n

<\/a>2.1 Prerequisites<\/h3>\n

Java 8 is required on the linux, windows or mac operating system. Gradle 5.4.1 version can be used for building gradle projects. Grails 3.3.10 is used for creating Grails Helloworld projects. Apache tomcat 9.0 is used as a servlet container to deploy Grails Helloworld example.<\/p>\n

<\/a>2.2 Download<\/h3>\n

You can download Java 8 from the Oracle web site<\/a> . Likewise, Gradle 5.4.1 can be downloaded from this website<\/a>. Grails binary distribution can be downloaded from github site<\/a>. Similarly, Apache Tomcat 9.0 can be downloaded from the apache website<\/a>.<\/p>\n

<\/a>2.3 Setup<\/h3>\n

2.3.1 Java Setup<\/h4>\n

You can set the environment variables for JAVA_HOME and PATH. They can be set as shown below.<\/em><\/p>\n

Java Environment<\/em><\/span><\/p>\n

JAVA_HOME=\u201d\/jboss\/jdk1.8.0_73\u2033\nexport JAVA_HOME\nPATH=$JAVA_HOME\/bin:$PATH\nexport PATH\n<\/pre>\n
2.3.2 Grails Setup<\/h4>\n
You can set the Grails home in the PATH as shown below:<\/p>\n
Grails Environment<\/em><\/span><\/p>\n
export GRAILS_HOME=\/path\/to\/grails\nexport PATH=\"$PATH:$GRAILS_HOME\/bin\"\n<\/pre>\n
2.3.3 Gradle Setup<\/h4>\n
The environment variables for Gradle are set as below:<\/p>\n
Gradle Environment<\/em><\/span><\/p>\n
GRADLE_HOME=\"\/opt\/gradle\/gradle-5.4.1\/bin\"\nexport GRADLE_HOME=$GRADLE_HOME\/bin\/\nexport PATH=$PATH:$GRADLE_HOME\n<\/pre>\n
<\/a>2.4 Running Gradle<\/h3>\n
You can check the version of the gradle by using the command gradle \u2013-version. The command for running Gradle is as below:<\/p>\n
Gradle Version<\/em><\/span><\/p>\n
gradle --version\n<\/pre>\n
The output of the executed Gradle command is shown below.<\/p>\n
\"Grails
Gradle Version<\/figcaption><\/figure>\n
<\/a>2.5 Running Grails<\/h3>\n
You can check the version of the Grails by using the command \u201cgrails \u2013v\u201d. The command for running Grails is as below:<\/p>\n
Grails Version<\/em><\/span><\/p>\n
grails -v\n<\/pre>\n
The output of the executed Grails command is shown below.<\/p>\n
\"Grails
Grails Version<\/figcaption><\/figure>\n
<\/a>2.6 Hello World in Grails<\/h3>\n
Grails framework is used for full-stack application development. It is an  opensource framework. It cuts down the challenges in creating web applications using Java. You can create a Grails application by using the command below:<\/p>\n
Hello World<\/em><\/span><\/p>\n
grails create-app HelloWorld\n<\/pre>\n
The output of the executed Grails command is shown below.<\/p>\n
\"Grails
Grails CreateApp<\/figcaption><\/figure>\n
\u201cCreateApp\u201d command creates the HelloWorld folder. The folder contains the Gradle build based project for Grails. Folder structure is shown below:<\/p>\n
\"Grails
HelloWorld Project<\/figcaption><\/figure>\n
Controllers are generated by using commands such as create-controller or generate-controller. You can create a controller by using the command below inside the HelloWorld folder:<\/p>\n
Create Controller<\/em><\/span><\/p>\n
grails create-controller Hello\n<\/pre>\n
A controller has action methods which are public. These methods map to a URI of a page. You can add the code to show \u201cGreetings\u201d inside the generated controller code. The code implementation of the HelloController<\/code> Class is shown below:<\/p>\n
Hello Controller<\/em><\/span><\/p>\n
package helloworld\n \nclass HelloController {\n \n    def index() { \n         \n        render \"Greetings\"\n     \n    }\n}\n<\/pre>\n
You can run the Grails app in grails console using the command below:<\/p>\n
Run App<\/em><\/span><\/p>\n
run-app\n<\/pre>\n
The snap shot of the grails console is shown below:<\/p>\n
\"Grails
Grails run-app<\/figcaption><\/figure>\n
You can access the Grails app in the browser from this URL: http:\/\/localhost:8080\/<\/a> . The page rendered is shown below:<\/p>\n
\"Grails
Grails App Running<\/figcaption><\/figure>\n
You can select the Hello Controller and click on the link. The following page shows up:<\/p>\n
\"Grails
Grails Hello Controller<\/figcaption><\/figure>\n
<\/a>2.7 Testing Grails Application<\/h3>\n
Grails Framework has features for automated testing. Unit testing and functional testing can be done using the framework. You can modify the HelloWorld\/src\/test\/groovy\/helloworld\/HelloControllerSpec.Groovy to test the index method. The code implemented for HelloControllerSpec<\/code> is shown below:<\/p>\n
Unit Test<\/em><\/span><\/p>\n
package helloworld\n \nimport grails.testing.web.controllers.ControllerUnitTest\nimport spock.lang.Specification\n \nclass HelloControllerSpec extends Specification implements ControllerUnitTest {\n \n    def setup() {\n    }\n \n    def cleanup() {\n    }\n \n    void \"test something\"() {\n         \n        when:\n        controller.index()\n         \n        then:\n        response.text == 'Greetings'\n \n    }\n}\n<\/pre>\n
You can run test the Grails app using the command below: <\/em>
 
<\/div> <\/div><\/p>\n
Test Grails App<\/em><\/span><\/p>\n
grails test-app\n<\/pre>\n
The output of the executed grails command is shown below.<\/p>\n
\"Grails
Grails Testing<\/figcaption><\/figure>\n
<\/a>2.8 Grails IDE Integration<\/h3>\n
You can configure the Groovy Eclipse plugin from the distribution site<\/a>. The screen shot below shows the configuration of Groovy Eclipse plugin from Help-> Install-> New Software.<\/p>\n
\"Grails
Groovy Eclipse<\/figcaption><\/figure>\n
The groovy version is set from Eclipse\u2019s Preferences -> Groovy ->Compiler. The setting of the groovy version 2.4.16 is shown below:<\/p>\n
\"Grails
Groovy Version- Eclipse<\/figcaption><\/figure>\n
Spock plugin can be installed with eclipse from this site<\/a>. The screenshot shows the spock plugin installation.<\/p>\n
\"Grails
Spocky Plugin \u2013 Eclipse<\/figcaption><\/figure>\n
You need to install SpringSource Tool Suite Grails Support(STS) from the distribution site<\/a>. You need to also ensure that Buildship gradle Integration plugin is installed. The snapshot below shows the installed gradle version.<\/p>\n
\"Grails
Eclipse \u2013 Gradle plugin<\/figcaption><\/figure>\n
<\/a>2.9 Building with Gradle<\/h3>\n
You can import the project HelloWorld which was a Gradle project created in section 2.6. The snapshot below shows the import wizard from the Eclipse menu File-> Import.<\/p>\n
\"Grails
Eclipse \u2013 Import Gradle Project<\/figcaption><\/figure>\n
After the import, Gradle Grails project can be viewed in the eclipse. The screen shot below shows the imported project.<\/p>\n
\"Grails
Gradle Grails Eclipse Project<\/figcaption><\/figure>\n
From the Gradle tasks view, You can see all the gradle tasks. To execute the grails app, click on bootRun. The screenshot below shows the gradle tasks view.<\/p>\n
\"Grails
Gradle Tasks Eclipse View<\/figcaption><\/figure>\n
The grails app can be accessed at http:\/\/localhost:8080 when the gradle runs the Grails app on eclipse. The snapshot of the Grails app and Gradle task execution is shown below.<\/p>\n
\"\"
Grails App Running \u2013 Eclipse<\/figcaption><\/figure>\n
The HelloController can be accessed and the page renders to show the \u201cGreetings\u201d message. The rendered page is shown below:<\/p>\n
\"\"
Hello Controller \u2013 Eclipse<\/figcaption><\/figure>\n
<\/a>2.10 Deploying a Grails App<\/h3>\n
War file is deployed on the typical servlet containers such as Tomcat, Jetty, etc. war command is used for generating a war file. You can deploy a Grails app on to a container which supports Java Servlet 3.0 specification. The command to create a war file is shown below:<\/p>\n
Deploying Grails App<\/em><\/span><\/p>\n
grails war\n<\/pre>\n
The output of the executed grails command is shown below.<\/p>\n
\"\"
Grails War command<\/figcaption><\/figure>\n
The war file from build\/libs can be deployed on apache tomcat. The startup script of the tomcat is executed. The screen shot shows the execution of the script and the browser rendering the page at http:\/\/localhost:8080.<\/p>\n
\"\"
Grails Deploy<\/figcaption><\/figure>\n
The controller page is accessed by clicking on the link. The page renders as shown below in the screen shot.<\/p>\n
\"\"
Gradle Grails Controller<\/figcaption><\/figure>\n
<\/a>2.11 Grails Spring Security<\/h3>\n
2.11.1  Role Based Security<\/h4>\n
This section talks about the configuration and extension of spring security plugin for Grails apps. The configuration can be maintained in conf\/application.yml. It can also be maintained in conf\/application.groovy.  application.yml can have the application-specific values and the defualt values can be in the DefaultSecurityConfig.groovy. The application-specific values are overridden with defaults and the settings are merged with the default configuration. The application.yml used is shown below:<\/p>\n
application.yml<\/em><\/span><\/p>\n
---\ngrails:\n    profile: web\n    codegen:\n        defaultPackage: com.app.security\n    spring:\n        transactionManagement:\n            proxies: false\n    gorm:\n        reactor:\n            # Whether to translate GORM events into Reactor events\n            # Disabled by default for performance reasons\n            events: false\ninfo:\n    app:\n        name: '@info.app.name@'\n        version: '@info.app.version@'\n        grailsVersion: '@info.app.grailsVersion@'\nspring:\n    main:\n        banner-mode: \"off\"\n    groovy:\n        template:\n            check-template-location: false\n\n# Spring Actuator Endpoints are Disabled by Default\nendpoints:\n    enabled: false\n    jmx:\n        enabled: true\n\n---\ngrails:\n    mime:\n        disable:\n            accept:\n                header:\n                    userAgents:\n                        - Gecko\n                        - WebKit\n                        - Presto\n                        - Trident\n        types:\n            all: '*\/*'\n            atom: application\/atom+xml\n            css: text\/css\n            csv: text\/csv\n            form: application\/x-www-form-urlencoded\n            html:\n              - text\/html\n              - application\/xhtml+xml\n            js: text\/javascript\n            json:\n              - application\/json\n              - text\/json\n            multipartForm: multipart\/form-data\n            pdf: application\/pdf\n            rss: application\/rss+xml\n            text: text\/plain\n            hal:\n              - application\/hal+json\n              - application\/hal+xml\n            xml:\n              - text\/xml\n              - application\/xml\n    urlmapping:\n        cache:\n            maxsize: 1000\n    controllers:\n        defaultScope: singleton\n    converters:\n        encoding: UTF-8\n    views:\n        default:\n            codec: html\n        gsp:\n            encoding: UTF-8\n            htmlcodec: xml\n            codecs:\n                expression: html\n                scriptlets: html\n                taglib: none\n                staticparts: none\nendpoints:\n    jmx:\n        unique-names: true\n\n---\nhibernate:\n    cache:\n        queries: false\n        use_second_level_cache: false\n        use_query_cache: false\ndataSource:\n    pooled: true\n    jmxExport: true\n    driverClassName: org.h2.Driver\n    username: sa\n    password: ''\n\nenvironments:\n    development:\n        dataSource:\n            dbCreate: create-drop\n            url: jdbc:h2:mem:devDb;MVCC=TRUE;LOCK_TIMEOUT=10000;DB_CLOSE_ON_EXIT=FALSE\n    test:\n        dataSource:\n            dbCreate: create-drop\n            url: jdbc:h2:mem:testDb;MVCC=TRUE;LOCK_TIMEOUT=10000;DB_CLOSE_ON_EXIT=FALSE\n    production:\n        dataSource:\n            dbCreate: none\n            url: jdbc:h2:.\/prodDb;MVCC=TRUE;LOCK_TIMEOUT=10000;DB_CLOSE_ON_EXIT=FALSE\n            properties:\n                jmxEnabled: true\n                initialSize: 5\n                maxActive: 50\n                minIdle: 5\n                maxIdle: 25\n                maxWait: 10000\n                maxAge: 600000\n                timeBetweenEvictionRunsMillis: 5000\n                minEvictableIdleTimeMillis: 60000\n                validationQuery: SELECT 1\n                validationQueryTimeout: 3\n                validationInterval: 15000\n                testOnBorrow: true\n                testWhileIdle: true\n                testOnReturn: false\n                jdbcInterceptors: ConnectionState\n                defaultTransactionIsolation: 2 # TRANSACTION_READ_COMMITTED\n---\ngrails:\n    plugin:\n        springsecurity:\n            apf:\n                storeLastUsername: true\n            useSwitchUserFilter: true\n            switchUser:\n                targetUrl: \/secure\/\n            adh:\n                errorPage: null # to trigger a 403\n            userLookup:\n                userDomainClassName: org.app.security.auth.LoginUser\n                authorityJoinClassName: org.app.security.auth.LoginUserRole\n            authority:\n                className: org.app.security.auth.LoginRole\n            controllerAnnotations:\n                staticRules:\n                    -\n                        pattern: \/\n                        access:\n                            - permitAll\n                    -\n                        pattern: \/dbconsole\/*\n                        access:\n                            - permitAll\n                    -\n                        pattern: \/error\n                        access:\n                            - permitAll\n                    -\n                        pattern: \/index\n                        access:\n                            - permitAll\n                    -\n                        pattern: \/index.gsp\n                        access:\n                            - permitAll\n                    -\n                        pattern: \/shutdown\n                        access:\n                            - permitAll\n                    -\n                        pattern: \/assets\/**\n                        access:\n                            - permitAll\n                    -\n                        pattern: \/**\/js\/**\n                        access:\n                            - permitAll\n                    -\n                        pattern: \/**\/css\/**\n                        access:\n                            - permitAll\n                    -\n                        pattern: \/**\/images\/**\n                        access:\n                            - permitAll\n                    -\n                        pattern: \/**\/favicon.ico\n                        access:\n                            - permitAll\n                    -\n                        pattern: \/login\/impersonate\n                        access:\n                            - ROLE_SUPERVISOR\n\n<\/pre>\n
resources.groovy is configured for LoginPasswordEncoderListener . Sample resources.groovy is shown below.<\/p>\n
resources.groovy<\/em><\/span><\/p>\n
import com.app.security.auth.LoginPasswordEncoderListener\n\nbeans = {\n    userPasswordEncoderListener(LoginPasswordEncoderListener)\n}\n<\/pre>\n
Authentication can be done in Grails using spring security. The authentication object checks if the present user can execute a secured action. The action can be  URL access, domain object securing, method level security and etc., The authentication can be pluggable using spring security. There exists an overlap between login authentication and user representation.  LoginUserDataService<\/code> will have an implementation of the method of findLoginUserUsername<\/code> with parameter<\/code> username. LoginUserDataService<\/code> class code is shown below.<\/p>\n
LoginUserService.groovy<\/em><\/span><\/p>\n
package com.app.security.auth\n\nimport grails.gorm.services.Service\nimport groovy.transform.CompileStatic\nimport com.app.security.LoginUser\n\n@CompileStatic\n@Service(LoginUser)\ninterface LoginUserDataService {\n\n    LoginUser save(String username, String password, boolean enabled)\n\n    List findLoginUserUsername()\n}\n<\/pre>\n
LoginUser<\/code> class has properties username, password and enabled. Authorities property is implemented as a method named getAuthorities<\/code>. Sample code is shown below:<\/p>\n
LoginUser<\/em><\/span><\/p>\n
package com.app.security\n\nimport groovy.transform.EqualsAndHashCode\nimport groovy.transform.ToString\nimport grails.compiler.GrailsCompileStatic\n\n@GrailsCompileStatic\n@EqualsAndHashCode(includes='username')\n@ToString(includes='username', includeNames=true, includePackage=false)\nclass LoginUser implements Serializable {\n\tprivate static final long serialVersionUID = 1\n\n\tString username\n\tString password\n\tboolean enabled = true\n\tboolean accountExpired\n\tboolean accountLocked\n\tboolean passwordExpired\n\n\tSet getAuthorities() {\n\t\t(LoginUserRole.findAllByUser(this) as List)*.role as Set\n\t}\n\n\tstatic constraints = {\n\t\tpassword blank: false, password: true\n\t\tusername blank: false, unique: true\n\t}\n\n\tstatic mapping = {\n\t\tpassword column: '`password`'\n\t}\n}<\/pre>\n
Authority class helps in presenting the user roles in the web app. URL are restricted to the users by assigning access rights. Users can have multiple roles with different access rights in the application. Default user role is a virtual role named ROLE_NO_ROLES. Typically this role does not have any secure resources for this role. A LoginRole<\/code> class code sample is shown below.<\/p>\n
LoginRole.groovy<\/em><\/span><\/p>\n
package com.app.security\n\n\nimport groovy.transform.EqualsAndHashCode\nimport groovy.transform.ToString\nimport grails.compiler.GrailsCompileStatic\n\n@GrailsCompileStatic\n@EqualsAndHashCode(includes='authority')\n@ToString(includes='authority', includeNames=true, includePackage=false)\nclass LoginRole implements Serializable {\n\n\tprivate static final long serialVersionUID = 1\n\tString authority\n\n\tstatic constraints = {\n\t\tauthority blank: false, unique: true\n\t}\n\n\tstatic mapping = {\n\t\tcache true\n\t}\n}\n<\/pre>\n
A Role class will have authority, constraints, and mapping. The role names can be configured with names starting with  \u201cROLE_\u201d.  Person and Authority have many to many relationship to each other. A LoginUserRole<\/code> represents the relationship for users having more than one role. The LoginUserRole<\/code> code is shown as below.<\/p>\n
LoginUserRole.groovy<\/em><\/span><\/p>\n
package com.app.security\n\nimport grails.gorm.DetachedCriteria\nimport groovy.transform.ToString\n\nimport org.codehaus.groovy.util.HashCodeHelper\nimport grails.compiler.GrailsCompileStatic\n\n@SuppressWarnings(['FactoryMethodName', 'Instanceof'])\n@GrailsCompileStatic\n@ToString(cache=true, includeNames=true, includePackage=false)\nclass LoginUserRole implements Serializable {\n\n\tprivate static final long serialVersionUID = 1\n\n\tLoginUser user\n\tLoginRole role\n\n\t@Override\n\tboolean equals(other) {\n\t\tif (other instanceof LoginUserRole) {\n\t\t\tother.userId == user?.id && other.roleId == role?.id\n\t\t}\n\t}\n\n\t@Override\n\tint hashCode() {\n\t\tint hashCode = HashCodeHelper.initHash()\n\t\tif (user) {\n\t\t\thashCode = HashCodeHelper.updateHash(hashCode, user.id)\n\t\t}\n\t\tif (role) {\n\t\t\thashCode = HashCodeHelper.updateHash(hashCode, role.id)\n\t\t}\n\t\thashCode\n\t}\n\n\tstatic LoginUserRole get(long userId, long roleId) {\n\t\tcriteriaFor(userId, roleId).get()\n\t}\n\n\tstatic boolean exists(long userId, long roleId) {\n\t\tcriteriaFor(userId, roleId).count()\n\t}\n\n\tprivate static DetachedCriteria criteriaFor(long userId, long roleId) {\n\t\tLoginUserRole.where {\n\t\t\tuser == LoginUser.load(userId) &&\n\t\t\t\t\trole == Role.load(roleId)\n\t\t}\n\t}\n\n\tstatic LoginUserRole create(Login user, LoginRole role, boolean flush = false) {\n\t\tdef instance = new LoginUserRole(user: user, role: role)\n\t\tinstance.save(flush: flush)\n\t\tinstance\n\t}\n\n\tstatic boolean remove(Login u, LoginRole r) {\n\t\tif (u != null && r != null) {\n\t\t\tLoginUserRole.where { user == u && role == r }.deleteAll()\n\t\t}\n\t}\n\n\tstatic int removeAll(Login u) {\n\t\tu == null ? 0 : LoginUserRole.where { user == u }.deleteAll() as int\n\t}\n\n\tstatic int removeAll(LoginRole r) {\n\t\tr == null ? 0 : LoginUserRole.where { role == r }.deleteAll() as int\n\t}\n\n\tstatic constraints = {\n\t\trole validator: { LoginRole r, LoginUserRole ur ->\n\t\t\tif (ur.user?.id) {\n\t\t\t\tLoginUserRole.withNewSession {\n\t\t\t\t\tif (LoginUserRole.exists(ur.user.id, r.id)) {\n\t\t\t\t\t\treturn ['userRole.exists']\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\t}\n\n\tstatic mapping = {\n\t\tid composite: ['user', 'role']\n\t\tversion false\n\t}\n}\n<\/pre>\n
The command below executes the above code snippets:<\/p>\n
Grails Run App<\/em><\/span><\/p>\n
grails run-app\n<\/pre>\n
The output of the executed command is shown below.<\/p>\n
\"\"
Grails Run App<\/figcaption><\/figure>\n
The screen shot below shows the execution of the sample code and the browser rendering the page at http:\/\/localhost:8080.<\/p>\n
\"\"
Login Security Demo<\/figcaption><\/figure>\n
2.11.2  Security Group<\/h4>\n
A security group can consist of multiple users. The access rights can be assigned to a group. The application will have multiple groups of users having different levels of access.<\/p>\n
2.11.3  Hierarchical Roles<\/h4>\n
Roles can be hierarchical to minimize the clutter in application request mappings. The configuration options for the hierarchical roles can be role Hierarchy and roleHierarchy entry class name. Sample hierarchy can be as shown below:<\/p>\n
Role Hierarchy<\/em><\/span><\/p>\n
grails.plugin.springsecurity.roleHierarchy = '''\n   ROLE_SUPER_ADMIN > ROLE_FINANCE_ADMIN\n   ROLE_FINANCE_ADMIN > ROLE_OPERATIONS_ADMIN\n   ROLE_OPERATIONS_ADMIN > ROLE_ADMIN\n'''\n<\/pre>\n
<\/a>3. Download the Source Code<\/h2>\n
Download<\/strong>
\nYou can download the full source code of this example here: Grails Spring Security Tutorial<\/strong><\/a><\/div>\n","protected":false},"excerpt":{"rendered":"
There are many security features in Spring Security such as authentication, authorization, instance-based control, and others. Grails developers use Spring security to secure the application. Table Of Contents 1. Overview 2. Grails Spring Security 2.1. Prerequisites 2.2. Download 2.3. Setup 2.4. Running Gradle 2.5. Running Grails 2.6. HelloWorld in Grails 2.7. Testing Grails Application 2.8. …<\/p>\n","protected":false},"author":31,"featured_media":27333,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1528],"tags":[1701],"class_list":["post-74737","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-grails","tag-spring-security"],"yoast_head":"\nGrails Spring Security Tutorial - Java Code Geeks<\/title>\n<meta name=\"description\" content=\"Interested to learn more about Grails? Then check out our detailed example on Grails Spring Security!\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/examples.javacodegeeks.com\/jvm-languages\/groovy\/grails\/grails-spring-security-tutorial\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Grails Spring Security Tutorial - Java Code Geeks\" \/>\n<meta property=\"og:description\" content=\"Interested to learn more about Grails? Then check out our detailed example on Grails Spring Security!\" \/>\n<meta property=\"og:url\" content=\"https:\/\/examples.javacodegeeks.com\/jvm-languages\/groovy\/grails\/grails-spring-security-tutorial\/\" \/>\n<meta property=\"og:site_name\" content=\"Examples Java Code Geeks\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/javacodegeeks\" \/>\n<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/bhagvank\" \/>\n<meta property=\"article:published_time\" content=\"2019-07-18T08:00:16+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/examples.javacodegeeks.com\/wp-content\/uploads\/2015\/09\/grails-logo.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"150\" \/>\n\t<meta property=\"og:image:height\" content=\"150\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Bhagvan Kommadi\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@bhaggu\" \/>\n<meta name=\"twitter:site\" content=\"@javacodegeeks\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Bhagvan Kommadi\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"12 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/examples.javacodegeeks.com\/jvm-languages\/groovy\/grails\/grails-spring-security-tutorial\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/examples.javacodegeeks.com\/jvm-languages\/groovy\/grails\/grails-spring-security-tutorial\/\"},\"author\":{\"name\":\"Bhagvan Kommadi\",\"@id\":\"https:\/\/examples.javacodegeeks.com\/#\/schema\/person\/4575ae335b8ff016be62c3b927d5d5e6\"},\"headline\":\"Grails Spring Security Tutorial\",\"datePublished\":\"2019-07-18T08:00:16+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/examples.javacodegeeks.com\/jvm-languages\/groovy\/grails\/grails-spring-security-tutorial\/\"},\"wordCount\":1458,\"commentCount\":1,\"publisher\":{\"@id\":\"https:\/\/examples.javacodegeeks.com\/#organization\"},\"image\":{\"@id\":\"https:\/\/examples.javacodegeeks.com\/jvm-languages\/groovy\/grails\/grails-spring-security-tutorial\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/examples.javacodegeeks.com\/wp-content\/uploads\/2015\/09\/grails-logo.jpg\",\"keywords\":[\"Spring Security\"],\"articleSection\":[\"Grails\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/examples.javacodegeeks.com\/jvm-languages\/groovy\/grails\/grails-spring-security-tutorial\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/examples.javacodegeeks.com\/jvm-languages\/groovy\/grails\/grails-spring-security-tutorial\/\",\"url\":\"https:\/\/examples.javacodegeeks.com\/jvm-languages\/groovy\/grails\/grails-spring-security-tutorial\/\",\"name\":\"Grails Spring Security Tutorial - Java Code Geeks\",\"isPartOf\":{\"@id\":\"https:\/\/examples.javacodegeeks.com\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/examples.javacodegeeks.com\/jvm-languages\/groovy\/grails\/grails-spring-security-tutorial\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/examples.javacodegeeks.com\/jvm-languages\/groovy\/grails\/grails-spring-security-tutorial\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/examples.javacodegeeks.com\/wp-content\/uploads\/2015\/09\/grails-logo.jpg\",\"datePublished\":\"2019-07-18T08:00:16+00:00\",\"description\":\"Interested to learn more about Grails? Then check out our detailed example on Grails Spring Security!\",\"breadcrumb\":{\"@id\":\"https:\/\/examples.javacodegeeks.com\/jvm-languages\/groovy\/grails\/grails-spring-security-tutorial\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/examples.javacodegeeks.com\/jvm-languages\/groovy\/grails\/grails-spring-security-tutorial\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/examples.javacodegeeks.com\/jvm-languages\/groovy\/grails\/grails-spring-security-tutorial\/#primaryimage\",\"url\":\"https:\/\/examples.javacodegeeks.com\/wp-content\/uploads\/2015\/09\/grails-logo.jpg\",\"contentUrl\":\"https:\/\/examples.javacodegeeks.com\/wp-content\/uploads\/2015\/09\/grails-logo.jpg\",\"width\":150,\"height\":150},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/examples.javacodegeeks.com\/jvm-languages\/groovy\/grails\/grails-spring-security-tutorial\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/examples.javacodegeeks.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"JVM Languages\",\"item\":\"https:\/\/examples.javacodegeeks.com\/category\/jvm-languages\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Groovy\",\"item\":\"https:\/\/examples.javacodegeeks.com\/category\/jvm-languages\/groovy\/\"},{\"@type\":\"ListItem\",\"position\":4,\"name\":\"Grails\",\"item\":\"https:\/\/examples.javacodegeeks.com\/category\/jvm-languages\/groovy\/grails\/\"},{\"@type\":\"ListItem\",\"position\":5,\"name\":\"Grails Spring Security Tutorial\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/examples.javacodegeeks.com\/#website\",\"url\":\"https:\/\/examples.javacodegeeks.com\/\",\"name\":\"Java Code Geeks\",\"description\":\"Java Examples and Code Snippets\",\"publisher\":{\"@id\":\"https:\/\/examples.javacodegeeks.com\/#organization\"},\"alternateName\":\"JCG\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/examples.javacodegeeks.com\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/examples.javacodegeeks.com\/#organization\",\"name\":\"Exelixis Media P.C.\",\"url\":\"https:\/\/examples.javacodegeeks.com\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/examples.javacodegeeks.com\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/examples.javacodegeeks.com\/wp-content\/uploads\/2022\/06\/exelixis-logo.png\",\"contentUrl\":\"https:\/\/examples.javacodegeeks.com\/wp-content\/uploads\/2022\/06\/exelixis-logo.png\",\"width\":864,\"height\":246,\"caption\":\"Exelixis Media P.C.\"},\"image\":{\"@id\":\"https:\/\/examples.javacodegeeks.com\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.facebook.com\/javacodegeeks\",\"https:\/\/x.com\/javacodegeeks\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/examples.javacodegeeks.com\/#\/schema\/person\/4575ae335b8ff016be62c3b927d5d5e6\",\"name\":\"Bhagvan Kommadi\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/examples.javacodegeeks.com\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/examples.javacodegeeks.com\/wp-content\/uploads\/2019\/02\/bhagvan.-kommadi-96x96.jpg\",\"contentUrl\":\"https:\/\/examples.javacodegeeks.com\/wp-content\/uploads\/2019\/02\/bhagvan.-kommadi-96x96.jpg\",\"caption\":\"Bhagvan Kommadi\"},\"description\":\"Bhagvan Kommadi is the Founder of Architect Corner & has around 20 years\u2019 experience in the industry, ranging from large scale enterprise development to helping incubate software product start-ups. He has done Masters in Industrial Systems Engineering at Georgia Institute of Technology (1997) and Bachelors in Aerospace Engineering from Indian Institute of Technology, Madras (1993). He is member of IFX forum,Oracle JCP and participant in Java Community Process. He founded Quantica Computacao, the first quantum computing startup in India. Markets and Markets have positioned Quantica Computacao in \u2018Emerging Companies\u2019 section of Quantum Computing quadrants. Bhagvan has engineered and developed simulators and tools in the area of quantum technology using IBM Q, Microsoft Q# and Google QScript. He has reviewed the Manning book titled : \\\"Machine Learning with TensorFlow\u201d. He is also the author of Packt Publishing book - \\\"Hands-On Data Structures and Algorithms with Go\\\".He is member of IFX forum,Oracle JCP and participant in Java Community Process. He is member of the MIT Technology Review Global Panel.\",\"sameAs\":[\"http:\/\/www.architectcorner.com\",\"https:\/\/www.facebook.com\/bhagvank\",\"https:\/\/in.linkedin.com\/pub\/bhagvan-kommadi\/0\/3a6\/b46\",\"https:\/\/x.com\/bhaggu\"],\"url\":\"https:\/\/examples.javacodegeeks.com\/author\/bhagvan-kommadi\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Grails Spring Security Tutorial - Java Code Geeks","description":"Interested to learn more about Grails? Then check out our detailed example on Grails Spring Security!","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/examples.javacodegeeks.com\/jvm-languages\/groovy\/grails\/grails-spring-security-tutorial\/","og_locale":"en_US","og_type":"article","og_title":"Grails Spring Security Tutorial - Java Code Geeks","og_description":"Interested to learn more about Grails? Then check out our detailed example on Grails Spring Security!","og_url":"https:\/\/examples.javacodegeeks.com\/jvm-languages\/groovy\/grails\/grails-spring-security-tutorial\/","og_site_name":"Examples Java Code Geeks","article_publisher":"https:\/\/www.facebook.com\/javacodegeeks","article_author":"https:\/\/www.facebook.com\/bhagvank","article_published_time":"2019-07-18T08:00:16+00:00","og_image":[{"width":150,"height":150,"url":"https:\/\/examples.javacodegeeks.com\/wp-content\/uploads\/2015\/09\/grails-logo.jpg","type":"image\/jpeg"}],"author":"Bhagvan Kommadi","twitter_card":"summary_large_image","twitter_creator":"@bhaggu","twitter_site":"@javacodegeeks","twitter_misc":{"Written by":"Bhagvan Kommadi","Est. reading time":"12 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/examples.javacodegeeks.com\/jvm-languages\/groovy\/grails\/grails-spring-security-tutorial\/#article","isPartOf":{"@id":"https:\/\/examples.javacodegeeks.com\/jvm-languages\/groovy\/grails\/grails-spring-security-tutorial\/"},"author":{"name":"Bhagvan Kommadi","@id":"https:\/\/examples.javacodegeeks.com\/#\/schema\/person\/4575ae335b8ff016be62c3b927d5d5e6"},"headline":"Grails Spring Security Tutorial","datePublished":"2019-07-18T08:00:16+00:00","mainEntityOfPage":{"@id":"https:\/\/examples.javacodegeeks.com\/jvm-languages\/groovy\/grails\/grails-spring-security-tutorial\/"},"wordCount":1458,"commentCount":1,"publisher":{"@id":"https:\/\/examples.javacodegeeks.com\/#organization"},"image":{"@id":"https:\/\/examples.javacodegeeks.com\/jvm-languages\/groovy\/grails\/grails-spring-security-tutorial\/#primaryimage"},"thumbnailUrl":"https:\/\/examples.javacodegeeks.com\/wp-content\/uploads\/2015\/09\/grails-logo.jpg","keywords":["Spring Security"],"articleSection":["Grails"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/examples.javacodegeeks.com\/jvm-languages\/groovy\/grails\/grails-spring-security-tutorial\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/examples.javacodegeeks.com\/jvm-languages\/groovy\/grails\/grails-spring-security-tutorial\/","url":"https:\/\/examples.javacodegeeks.com\/jvm-languages\/groovy\/grails\/grails-spring-security-tutorial\/","name":"Grails Spring Security Tutorial - Java Code Geeks","isPartOf":{"@id":"https:\/\/examples.javacodegeeks.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/examples.javacodegeeks.com\/jvm-languages\/groovy\/grails\/grails-spring-security-tutorial\/#primaryimage"},"image":{"@id":"https:\/\/examples.javacodegeeks.com\/jvm-languages\/groovy\/grails\/grails-spring-security-tutorial\/#primaryimage"},"thumbnailUrl":"https:\/\/examples.javacodegeeks.com\/wp-content\/uploads\/2015\/09\/grails-logo.jpg","datePublished":"2019-07-18T08:00:16+00:00","description":"Interested to learn more about Grails? Then check out our detailed example on Grails Spring Security!","breadcrumb":{"@id":"https:\/\/examples.javacodegeeks.com\/jvm-languages\/groovy\/grails\/grails-spring-security-tutorial\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/examples.javacodegeeks.com\/jvm-languages\/groovy\/grails\/grails-spring-security-tutorial\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/examples.javacodegeeks.com\/jvm-languages\/groovy\/grails\/grails-spring-security-tutorial\/#primaryimage","url":"https:\/\/examples.javacodegeeks.com\/wp-content\/uploads\/2015\/09\/grails-logo.jpg","contentUrl":"https:\/\/examples.javacodegeeks.com\/wp-content\/uploads\/2015\/09\/grails-logo.jpg","width":150,"height":150},{"@type":"BreadcrumbList","@id":"https:\/\/examples.javacodegeeks.com\/jvm-languages\/groovy\/grails\/grails-spring-security-tutorial\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/examples.javacodegeeks.com\/"},{"@type":"ListItem","position":2,"name":"JVM Languages","item":"https:\/\/examples.javacodegeeks.com\/category\/jvm-languages\/"},{"@type":"ListItem","position":3,"name":"Groovy","item":"https:\/\/examples.javacodegeeks.com\/category\/jvm-languages\/groovy\/"},{"@type":"ListItem","position":4,"name":"Grails","item":"https:\/\/examples.javacodegeeks.com\/category\/jvm-languages\/groovy\/grails\/"},{"@type":"ListItem","position":5,"name":"Grails Spring Security Tutorial"}]},{"@type":"WebSite","@id":"https:\/\/examples.javacodegeeks.com\/#website","url":"https:\/\/examples.javacodegeeks.com\/","name":"Java Code Geeks","description":"Java Examples and Code Snippets","publisher":{"@id":"https:\/\/examples.javacodegeeks.com\/#organization"},"alternateName":"JCG","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/examples.javacodegeeks.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/examples.javacodegeeks.com\/#organization","name":"Exelixis Media P.C.","url":"https:\/\/examples.javacodegeeks.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/examples.javacodegeeks.com\/#\/schema\/logo\/image\/","url":"https:\/\/examples.javacodegeeks.com\/wp-content\/uploads\/2022\/06\/exelixis-logo.png","contentUrl":"https:\/\/examples.javacodegeeks.com\/wp-content\/uploads\/2022\/06\/exelixis-logo.png","width":864,"height":246,"caption":"Exelixis Media P.C."},"image":{"@id":"https:\/\/examples.javacodegeeks.com\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/javacodegeeks","https:\/\/x.com\/javacodegeeks"]},{"@type":"Person","@id":"https:\/\/examples.javacodegeeks.com\/#\/schema\/person\/4575ae335b8ff016be62c3b927d5d5e6","name":"Bhagvan Kommadi","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/examples.javacodegeeks.com\/#\/schema\/person\/image\/","url":"https:\/\/examples.javacodegeeks.com\/wp-content\/uploads\/2019\/02\/bhagvan.-kommadi-96x96.jpg","contentUrl":"https:\/\/examples.javacodegeeks.com\/wp-content\/uploads\/2019\/02\/bhagvan.-kommadi-96x96.jpg","caption":"Bhagvan Kommadi"},"description":"Bhagvan Kommadi is the Founder of Architect Corner & has around 20 years\u2019 experience in the industry, ranging from large scale enterprise development to helping incubate software product start-ups. He has done Masters in Industrial Systems Engineering at Georgia Institute of Technology (1997) and Bachelors in Aerospace Engineering from Indian Institute of Technology, Madras (1993). He is member of IFX forum,Oracle JCP and participant in Java Community Process. He founded Quantica Computacao, the first quantum computing startup in India. Markets and Markets have positioned Quantica Computacao in \u2018Emerging Companies\u2019 section of Quantum Computing quadrants. Bhagvan has engineered and developed simulators and tools in the area of quantum technology using IBM Q, Microsoft Q# and Google QScript. He has reviewed the Manning book titled : \"Machine Learning with TensorFlow\u201d. He is also the author of Packt Publishing book - \"Hands-On Data Structures and Algorithms with Go\".He is member of IFX forum,Oracle JCP and participant in Java Community Process. He is member of the MIT Technology Review Global Panel.","sameAs":["http:\/\/www.architectcorner.com","https:\/\/www.facebook.com\/bhagvank","https:\/\/in.linkedin.com\/pub\/bhagvan-kommadi\/0\/3a6\/b46","https:\/\/x.com\/bhaggu"],"url":"https:\/\/examples.javacodegeeks.com\/author\/bhagvan-kommadi\/"}]}},"_links":{"self":[{"href":"https:\/\/examples.javacodegeeks.com\/wp-json\/wp\/v2\/posts\/74737","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/examples.javacodegeeks.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/examples.javacodegeeks.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/examples.javacodegeeks.com\/wp-json\/wp\/v2\/users\/31"}],"replies":[{"embeddable":true,"href":"https:\/\/examples.javacodegeeks.com\/wp-json\/wp\/v2\/comments?post=74737"}],"version-history":[{"count":0,"href":"https:\/\/examples.javacodegeeks.com\/wp-json\/wp\/v2\/posts\/74737\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/examples.javacodegeeks.com\/wp-json\/wp\/v2\/media\/27333"}],"wp:attachment":[{"href":"https:\/\/examples.javacodegeeks.com\/wp-json\/wp\/v2\/media?parent=74737"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/examples.javacodegeeks.com\/wp-json\/wp\/v2\/categories?post=74737"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/examples.javacodegeeks.com\/wp-json\/wp\/v2\/tags?post=74737"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}