Grails spring-security-core插件教程

Question

我使用Grails 2.4.5创建了一个新的应用程序TestSecurity，创建了一个简单的控制器SercuredController，可以从接口访问它。

package testsecurity

class SecuredController {

    def index() { 
        render 'HELLO FROM CONTROLLER'
    }
}

然后我添加了一个spring_security_core插件：我添加了compile“:spring-security-core:2.0-rc4”。然后是s2-quickstart com.testApp用户角色

config.groovy文件如下所示：

// Added by the Spring Security Core plugin:
grails.plugin.springsecurity.userLookup.userDomainClassName = 'com.testapp.User'
grails.plugin.springsecurity.userLookup.authorityJoinClassName = 'com.testapp.UserRole'
grails.plugin.springsecurity.authority.className = 'com.testapp.Role'
grails.plugin.springsecurity.controllerAnnotations.staticRules = [
    '/':                              ['permitAll'],
    '/index':                         ['permitAll'],
    '/index.gsp':                     ['permitAll'],
    '/assets/**':                     ['permitAll'],
    '/**/js/**':                      ['permitAll'],
    '/**/css/**':                     ['permitAll'],
    '/**/images/**':                  ['permitAll'],
    '/**/favicon.ico':                ['permitAll']
]

Answer 1

我在控制器上使用了@Securite(['Role_Anonymones'])注释。安全也开始发挥作用了。