Default Login Screen with Spring Security

The spring security plugin enables some amount of default application security without any substantial coding. Here was my 30 minute experiment tonight:

> grails create-app sectest

>cd sectest

In grails-app/conf/BuildConfig.groovy I added the following under the "repositories" section:

mavenRepo "http://repo.spring.io/milestone/"

and under the "plugins" section added:

compile ':spring-security-core:2.0-RC2'

Then:

> grails run-app

I did this to import the plugin. I probably could have just build it. Anyway with the plugin installed I did:

> grails stop-app

> grails s2-quickstart com.homesteadgaming User Role

> grails run-app

Then browsing to localhost:8080/sectest, I saw the login controller listed. Clicking on the login controller gave me this default screen:

My login attempts failed with a sensible error, which is expected since there are no users in my default database.

So next I populated a default user which I hear you can do by editing BootStrap.groovy. That looks like this:

class BootStrap {

    def init = { servletContext ->

    def adminUser = new com.homesteadgaming.User(

                username: 'admin',

                password: 'admin',

                enabled: true).save(failOnError: true)

    }

    def destroy = {

    }

}

And now after restarting the app again, I can login with admin/admin. That's nice.