(Quick Reference)

4 Configuration - Reference Documentation

Authors: Burt Beckwith

Version: 1.0.4

4 Configuration

There are a few configuration options for OpenID.

All of these property overrides must be specified in grails-app/conf/Config.groovy using the grails.plugins.springsecurity suffix, for example
grails.plugins.springsecurity.openid.domainClass =
     'com.mycompany.myapp.OpenID'

NameDefaultMeaning
openid.claimedIdentityFieldName'openid_identifier'the login name form parameter
openid.nonceMaxSeconds300maximum life of the generated nonce shared with the OpenID provider; determines how long the authentication is allowed to take
openid.domainClass'OpenID'the full class name of the many-to-one OpenID domain class
openid.encodePasswordfalsewhether to encode the password in OpenIdController.createNewAccount (set to true if not using the new style of User domain class that auto-encrypts)
openid.registration.autocreatetrueif true will redirect valid OpenID authentications to the create and link user workflows, otherwise shows the standard login fail page
openid.registration.requiredAttributesnonerequired Attribute Exchange attributes
openid.registration.optionalAttributes[email: 'http://schema.openid.net/contact/email']optional Attribute Exchange attributes
openid.registration.createAccountUri'/login/openIdCreateAccount'redirect address used when openid.registration.autocreate is true
openid.registration.roleNames['ROLE_USER']a list of names of roles to grant to users who self-register after an OpenID authentication; the roles must already exist
openid.userLookup.openIdsPropertyName'openIds'the name of the property in the user class for the OpenID domain class collection