Grails: How To Secure Your Application Using Spring Security Core
A step by step tutorial on how to use Spring Security Core to secure your Grails application. Introduction Any web-based application must have a mechanism for authenticating users and authorising them to do their defined activities in the system. One can go for the traditional approach of doing it with a login form; it works for the start. But on today's Internet, a classic pair of username and password is not always available as many people prefer to use a single OpenID, Twitter or Facebook account to access their data across different web sites. Also in corporate environments usually authentication and authorisation is done against an LDAP database. This is where Spring Security collection comes to play by allowing you to connect to a wide range of data sources and acquire access information from them instead of strong them yourself. At the heart of Spring Security lies Spring Security Core and as usual there's a Grails plugin for that! Let's see how we can use it. ...