Article: Securing a Grails Application with Acegi Security

Hi,

first of all thank you very much for your (even for a newbie like me) easily understandable explanation.

First I got the example to work without problems. But to get better performance i wanted to have my database connections pooled. So I configured pooled=true in Datasource.groovy. As soon as i did this I could only call a few pages before the application stopped responding. After looking at debug output i think the reason is that acegi is waiting for getting another connection from connection pool.

Here are the last debug output statements:

org.acegisecurity.ui.WebAuthenticationDetails@255f8: RemoteIpAddress: 127.0.0.1; SessionId: 1raoz7gc3n0mf; Granted Authorities: ROLE_ANONYMOUS'
org.acegisecurity.providers.anonymous.AnonymousProcessingFilter Populated SecurityContextHolder with anonymous token: 'org.acegisecurity.providers.anonymous.AnonymousAuthenticationToken@90572420: Username: anonymousUser; Password: [PROTECTED]; Authenticated: true; Details: org.acegisecurity.ui.WebAuthenticationDetails@255f8: RemoteIpAddress: 127.0.0.1; SessionId: 1raoz7gc3n0mf; Granted Authorities: ROLE_ANONYMOUS'
org.acegisecurity.util.FilterChainProxy /customer/list at position 7 of 8 in additional filter chain; firing Filter: 'org.acegisecurity.ui.ExceptionTranslationFilter@697087'
org.acegisecurity.util.FilterChainProxy /customer/list at position 7 of 8 in additional filter chain; firing Filter: 'org.acegisecurity.ui.ExceptionTranslationFilter@697087'
org.acegisecurity.util.FilterChainProxy /customer/list at position 8 of 8 in additional filter chain; firing Filter: 'org.acegisecurity.intercept.web.FilterSecurityInterceptor@5acf13'
org.acegisecurity.util.FilterChainProxy /customer/list at position 8 of 8 in additional filter chain; firing Filter: 'org.acegisecurity.intercept.web.FilterSecurityInterceptor@5acf13'
org.hibernate.impl.SessionImpl opened session at timestamp: 4933924451647488
org.hibernate.jdbc.AbstractBatcher about to open PreparedStatement (open PreparedStatements: 0, globally: 0)
org.hibernate.jdbc.ConnectionManager opening JDBC connection

I seached and posted in grails user maillist, unfortunately without result.
Do you know about this problem?

I went through the article and put it to use in several apps.

I think the plugin is missing the AuthenticateService.groovy file. Because of this, you can't register a new user.

Am I missing something?

Thanks

Not sure about the problem that your are having , but the plugin has the AuthenticateService.groovy. You should be able to find it in
%your application dir%\plugins\acegi-0.2\grails-app\services

I loosely followed this excellent tutorial but instead of using the race/register controllers I used my own. The URL of my controller includes an uppercase letter, e.g. "purchaseOrder".

If you configure the Requestmap using mixed-case then the Acegi will fail to patern-match that URL, and hence fail to protect those pages.

e.g. /purchaseOrder/**

By enabling Acegi debugging I could see that Acegi was configured to convert all URLs to lowercase before attempting pattern matching. To fix this problem, I used lowercase URL patterns in the Requestmap and it worked great.

e.g. /purchaseorder/**

Thanks for the excellent tutorial!

Thanks for the help. AuthenticateService.groovy is there in plugins directory.

I tried some more things and found out that if I use static requestMapString instead of useRequestMapDomainClass it works fine with my pooled datasource.

So it seems to me that there is a problem in data access (perhaps release of connections not correctly implemented) when loading database contents of table requestmap.

Under %your application dir%\plugins\acegi-0.2\grails-app\services,I find no
AuthenticateService.groovy.But now I can register new users.

When trying to grails generate-registration,I can't get connection to Internet because I use the compus net and download jars then put them into lib file.First time I also could not register users.

And now I am confused.

Hi,

Thank you very much for your easily understandable tutorial.

Is there also any solution, to authenticate users from an Active Directory.
Can you tell me how to inplement that with grails or do you know any tutorials?

greets

I have found the AuthenticateService.groovy in plugin directory.
Thanks!

Hi,
I've installed acegi in my application and have generated the domains, managers und registration. But when I try to compile and restart my Application, I got a BeanCreationException. I had to import the AuthenticateService manual. And there are errors in my Logincontroller like it doesn't find the imported packages.
Can anybody help me?

I am trying to add some additional fields to my user forms. I did so by editing AuthUser.groovy and adding them. I then ran grails generate-all AuthUser and it created the new create, and edit gsps.

But the problem is:
1. In the tutorial UserController is used, NOT AuthUserController. When I go to create a new User using UserController my new fields aren't there. How can I get Grails to generate my gsp's for user?

2. If I instead use the AuthUser controller, my new fields show up but the password doesn't save correctly. This is because AuthUserController doesn't have hardly any of the code UserController has, such as ciphering the password. Also, roles don't show up in the page, and I imagine won't be saved if I stick them there by hand.

I am not sure what the difference is between AuthUser and User but there is only one domain object, AuthUser, and only one table, auth_user. So if I want to add additional fields do I edit the AuthUser domain object but then edit by hand user/create.gsp, user/edit.gsp?

Thanks,
Bob

First of all, thanks for that helpful tutorial.

As far as described, I was able to follow and to make it work. Even the basic tutorial at the grails.org site works.

The next step I try to redirect to a more user friendly view when the HTTP Error 403 comes via UrlMappings.groovy like:

class UrlMappings {

static mappings = {
"/$controller/$action?/$id?"{

constraints { }

}

"500"(view:'/error')

"401"(view:'/error/unauthorized')

"403"(view:'/error/forbidden')

}

}

Hello Franz,

I discovered the same problem in a similar environment.
Seems like a bug.



Cheers

S.

after you modify your authUser, use "grails generate-manager" to complete your user contoll.

First of all, thank you for this excellent tutorial.

I want to know if is't possible to use an already existing Acegi Components with the Grails acegi plugin and how.

Thanks in advance

Chawki

I faced some issues while implementing OpenId with Acegei
See my post below

www.rajivnarula.com/blog/2009/11/16/grails-and-...

HTH

Hi,

I am stuck on dynamically redirecting user to original page after redirect to Login page, please let through example.

Regards