kaleidos / grails-security-stateless

Grails plugin to implement stateless authentication using Spring Security
Apache License 2.0
17 stars 8 forks source link

Add additional configuration options to the documentation and/or test for null? #27

Open B5A7 opened 9 years ago

B5A7 commented 9 years ago

Trying to use the plugin, I get this error: Cannot convert value of type [groovy.util.ConfigObject] to required type [java.lang.String]

Caused by endpointUrl = conf.springsecurity.invalidate.endpointUrl in SecurityStatelessGrailsPlugin?

http://stackoverflow.com/questions/21125979/grails-events-push-plugin-problems-with-grails-2-3-3 may be related.

Adding this items to Config.groovy solves the error: grails.plugin.security.stateless.springsecurity.invalidate.endpointUrl = "xxxx"

Could also include grails.plugin.security.stateless.springsecurity.invalidate.active = true/false

The discussion about salting in http://www.kaleidos.net/blog/295/stateless-authentication-with-api-rest/ is probably relevant - I am guessing that is what the invalidate call should do - clear the salt?

My configuration: grails 2.4.4 compile ':security-stateless:0.0.7' compile ":spring-security-core:2.0-RC4" compile ":spring-security-ldap:2.0-RC2" compile ":spring-security-ui:1.0-RC2"