Field Detail

• protected static final java.util.List<java.lang.String> NO_SALT

Property Detail

• org.springframework.security.authentication.AuthenticationTrustResolver authenticationTrustResolver

  dependency injection for authenticationTrustResolver

• grails.core.GrailsApplication grailsApplication

  dependency injection for grailsApplication

• java.lang.Object objectDefinitionSource

  dependency injection for org.springframework.security.web.access.intercept.FilterInvocationSecurityMetadataSource

• java.lang.Object passwordEncoder

  dependency injection for the password encoder

Constructor Detail

• SpringSecurityService()

Method Detail

• void clearCachedRequestmaps()

  Call when editing, creating, or deleting a Requestmap to flush the cached configuration and rebuild using the most recent data.

• @grails.gorm.transactions.Transactional
  void createRequestMaps(java.util.List<java.util.Map<java.lang.String, java.lang.Object>> data)

  Create multiple requestmap instances in a transaction.

  Parameters:

  data - a list of maps where each map contains the data for one instance (configAttribute and url are required, httpMethod is optional)

• @grails.gorm.transactions.Transactional
  void createRequestMaps(java.util.List<java.lang.String> urls, java.lang.String configAttribute)

  Create multiple requestmap instances in a transaction that all share the same configAttribute.

  Parameters:

  urls - a list of url patterns

• @grails.gorm.transactions.Transactional
  void deleteRole(java.lang.Object role)

  Delete a role, and if Requestmap class is used to store roles, remove the role from all Requestmap definitions. If a Requestmap's config attribute is this role, it will be deleted.

  Parameters:

  role - the role to delete

• java.lang.String encodePassword(java.lang.String password)

  Encode the password using the configured PasswordEncoder.

• protected java.util.List findRequestmapsByRole(java.lang.String roleName, java.lang.Object conf)

• org.springframework.security.core.Authentication getAuthentication()

  Get the currently logged in user's Authentication. If not authenticated and the AnonymousAuthenticationFilter is active (true by default) then the anonymous user's auth will be returned (AnonymousAuthenticationToken with username 'anonymousUser' unless overridden).

  Returns:

  the authentication

• protected java.lang.Class<?> getClassForName(java.lang.String name)

• java.lang.Object getCurrentUser()

  Get the domain class instance associated with the current authentication.

  Returns:

  the user

• java.lang.Object getCurrentUserId()

• java.lang.Object getPrincipal()

  Get the currently logged in user's principal. If not authenticated and the AnonymousAuthenticationFilter is active (true by default) then the anonymous user's name will be returned ('anonymousUser' unless overridden).

  Returns:

  the principal

• protected groovy.util.ConfigObject getSecurityConfig()

• boolean isAjax(jakarta.servlet.http.HttpServletRequest request)

  Check if the request was triggered by an Ajax call.

  Parameters:

  request - the request

  Returns:

  true if Ajax

• boolean isLoggedIn()

  Quick check to see if the current user is logged in.

  Returns:

  true if the user is authenticated and not anonymous

• java.lang.Object loadCurrentUser()

  Get a proxy for the domain class instance associated with the current authentication. Use this when you want the user only for its id, e.g. as a proxy for the foreign key in queries like "CreditCard.findAllByUser(user)"

  Returns:

  the proxy

• void reauthenticate(java.lang.String username, java.lang.String password)

  Rebuild an Authentication for the given username and register it in the security context. Typically used after updating a user's authorities or other auth-cached info.

  Also removes the user from the user cache to force a refresh at next login.

  Parameters:

  username - the user's login name

  password - optional

• void reloadDBRoleHierarchy()

  Call for reloading the role hierarchy configuration from the database.

  Authors:

  fpape

• @grails.gorm.transactions.Transactional
  boolean updateRole(java.lang.Object role, java.lang.Object newProperties)

  Update a role, and if Requestmap class is used to store roles, replace the new role name in all Requestmap definitions that use it if the name was changed.

  Parameters:

  role - the role to update

  newProperties - the new role attributes ('params' from the calling controller)

• protected boolean useRequestmaps()