(Quick Reference)

Spring Security Core Plugin - Reference Documentation

Authors: Burt Beckwith, Beverley Talbott

Version: 2.0.0

Table of Contents

1Introduction to the Spring Security Plugin

1.1Configuration Settings Now in Config.groovy

1.2Getting Started

2What's New in Version 2.0

3Domain Classes

3.1Person Class

3.2Authority Class

3.3PersonAuthority Class

3.4Group Class

3.5PersonGroup Class

3.6GroupAuthority Class

3.7Requestmap Class

4Configuring Request Mappings to Secure URLs

4.1Defining Secured Annotations

4.2Simple Map in Config.groovy

4.3Requestmap Instances Stored in the Database

4.4Using Expressions to Create Descriptive, Fine-Grained Rules

5Helper Classes

5.1SecurityTagLib

5.2SpringSecurityService

5.3SpringSecurityUtils

6.1Event Notification

6.2Registering an Event Listener

6.3Registering Callback Closures

7User, Authority (Role), and Requestmap Properties

8Authentication

8.1Basic and Digest Authentication

8.2Certificate (X509) Login Authentication

8.3Remember-Me Cookie

8.4Ajax Authentication

9Authentication Providers

10Custom UserDetailsService

11Password and Account Protection

11.1Password Hashing

11.2Salted Passwords

11.3Account Locking and Forcing Password Change

12URL Properties

13Hierarchical Roles

16Channel Security

17IP Address Restrictions

18Session Fixation Prevention

19Logout Handlers

21Miscellaneous Properties

22.1Using Controller Annotations to Secure URLs

23Controller MetaClass Methods

24Internationalization

Quick Reference (hide)