(Quick Reference)

Spring Security Core Plugin - Reference Documentation

Authors: Burt Beckwith, Beverley Talbott

Version: 1.2.7.3

Table of Contents

1Introduction to the Spring Security Plugin

1.1Configuration Settings Now in Config.groovy

1.2Getting Started

2Differences Between the Spring Security and Acegi Plugins

3Migrating from the Acegi Plugin

4Required and Optional Domain Classes

4.1Person Class

4.2Authority Class

4.3PersonAuthority Class

4.4Requestmap Class

5Configuring Request Mappings to Secure URLs

5.1Defining Secured Annotations

5.2Simple Map in Config.groovy

5.3Requestmap Instances Stored in the Database

5.4Using Expressions to Create Descriptive, Fine-Grained Rules

6Helper Classes

6.1SecurityTagLib

6.2SpringSecurityService

6.3SpringSecurityUtils

7.1Event Notification

7.2Registering an Event Listener

7.3Registering Callback Closures

8User, Authority (Role), and Requestmap Properties

9Authentication

9.1Basic and Digest Authentication

9.2Certificate (X509) Login Authentication

9.3Remember-Me Cookie

9.4Ajax Authentication

10Authentication Providers

11Custom UserDetailsService

12Password and Account Protection

12.1Password Encryption

12.2Salted Passwords

12.3Account Locking and Forcing Password Change

13URL Properties

14Hierarchical Roles

17Channel Security

18IP Address Restrictions

19Session Fixation Prevention

20Logout Handlers

22Miscellaneous Properties

23.1Using Controller Annotations to Secure URLs

23.2Migration From the Acegi Plugin

24Controller MetaClass Methods

25Internationalization

Quick Reference (hide)