Comments on cafebabe: WS-Security Support in Spring-WS Grails Plugin

Hi, This is Hay Tran. I am using grails 2.0 with t...

2012-02-10T08:49:33.357+01:00

Hi, This is Hay Tran.
I am using grails 2.0 with the latest springws and spring-security-core.
I tried using
class WsSecurityConfig {
def incomingMessageValidation = {
usernameToken(useSpringSecurity:true)
}
}

And it complaints:
... finished configuring Spring Security Core
| Error 2012-02-09 23:43:14,213 [Thread-10] ERROR context.GrailsContextLoader - Error executing bootstraps: Spring Security beans not found. Make sure acegi plugin is installed.
Message: Spring Security beans not found. Make sure acegi plugin is installed.
Line | Method
->> 15 | doCall in WsSecurityConfig$_closure1
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
| 342 | reload in SpringwsGrailsPlugin
| 208 | doCall . in SpringwsGrailsPlugin$_closure2
| 334 | innerRun in java.util.concurrent.FutureTask$Sync
| 166 | run . . . in java.util.concurrent.FutureTask
| 1110 | runWorker in java.util.concurrent.ThreadPoolExecutor
| 603 | run . . . in java.util.concurrent.ThreadPoolExecutor$Worker
^ 722 | run in java.lang.Thread
Disconnected from the target VM, address: '127.0.0.1:53153', transport: 'socket'

Process finished with exit code 1

I suppose the above tutorials only works if one is using acegi.

Does anyone know how to configure ws-security for spring-security-core?

Thanks,

Development on the acegi plugin has stopped. Did...

2011-03-15T04:03:39.538+01:00

Development on the acegi plugin has stopped.

Did you ever get useSpringSecurity:true with the new spring-security-core plugin?

Hi tareq, Fantastic article, this helped me out a...

2010-09-24T15:31:44.911+01:00

Hi tareq,

Fantastic article, this helped me out a lot to setup WS-Security on grails.

I am thinking about providing a fine grained authorization configuration by adding a
property to the endpoints like

static roles=[]

I am looking into springws plugin and i think I have to provide a different ObjectDefinitionSource,

although i can see references to urlMaps in several other classes, so the modification might not be possible without hacking into the plugin. What do you think?

Hi Tareq, Thanks for clearing that up! It's q...

2010-03-18T23:23:59.908+01:00

Hi Tareq,

Thanks for clearing that up! It's quite a nasty side-effect of WS-security that I was not aware of.

Kind regards,

Joost

Hi Joost, Please check out the discussion on this...

2010-03-17T16:14:27.754+01:00

Hi Joost,

Please check out the discussion on this thread for the clarification:
http://jira.codehaus.org/browse/GRAILSPLUGINS-1715
Thanks,
Tareq

Hi Tareq, Why does the plugin change the password...

2010-03-17T13:57:58.537+01:00

Hi Tareq,

Why does the plugin change the password encoder for a plain text one? I am not using the WS-security yet, but suddenly ALL acegi passwords are plaintext in the database now. For the moment I just took the lines that instantiate the encoder out and that seems to work for now but I'm worried that as soon as I start to use WS-security things will start to go wrong?

Kind regards,

Joost