Hi,
I had to create a custom authentication filter to get additional account information from the login form. I have tried various ways of doing it and found the intended way of doing this based on the source code documentation.
Everything works great and as expected in all cases, except when the credentials are incorrect... instead the user gets a 401 error message.
So, I added this to the URLMappings:
"401"(controller: "login", action:"authfail")
Now, a failed login DO get the login prompt... however there is no error message with the reason why the login failed.
Any ideas what I am doing wrong? Here are the source files that I am using.
Thanks,
Frik
NOTE: The login failure message works fine until I add authenticationProcessingFilter in resources.groovy to get the account information.
class GwRequestHolderAuthenticationFilter extends RequestHolderAuthenticationFilter
{
public static final String SPRING_SECURITY_FORM_ACCOUNT_KEY = "j_account";
@Override
protected String obtainUsername(HttpServletRequest request)
{
String account = request.getParameter(SPRING_SECURITY_FORM_ACCOUNT_KEY);
String username = request.getParameter(usernameParameter);
if (account)
{
return account+"\\"+username
}
return username;
}
}
class GwUserDetailsService implements GrailsUserDetailsService
{
UserDetails loadUserByUsername(String username) throws UsernameNotFoundException
{
return loadUserByUsername(username, true)
}
UserDetails loadUserByUsername(String username, boolean loadRoles) throws AuthenticationException
{
User.withTransaction
{ status ->
//fake it for now
User user = User.findByUsername(username);
if (user)
{
return new GwUserDetails(user);
}
throw new UsernameNotFoundException("User not found", username);//NOT SHOWING LOGIN FORM AGAIN
}
}
}
class GwUserDetails extends GrailsUser
{
GwUserDetails(User u)
{
super(u.username, u.password, u.enabled, ! u.accountExpired, ! u.passwordExpired, ! u.accountLocked, u.gwGrantedAuthorities(), u.id)
}
}
URLMappings:
"/login/$action?"(controller: "login")
"/logout/$action?"(controller: "logout")
"404"(controller: "login")
resources.groovy
userDetailsService(GwUserDetailsService)
authenticationProcessingFilter(GwRequestHolderAuthenticationFilter)
{
authenticationManager = ref('authenticationManager')
rememberMeServices = ref('rememberMeServices')
}
Locked
