如何使用Grails中的spring security rest插件进行身份验证
我使用的是Grails版本2.4.3。我正在创建一个支持RESTful API的应用程序。由于对这些API的访问应该经过身份验证，所以我尝试了SpringSecurityREST插件。我签出了，我能理解的是，如何使用Grails中的spring security rest插件进行身份验证,rest,grails,spring-security,grails-plugin,grails-2.4,Rest,Grails,Spring Security,Grails Plugin,Grails 2.4,我使用的是Grails版本2.4.3。我正在创建一个支持RESTful API的应用程序。由于对这些API的访问应该经过身份验证，所以我尝试了SpringSecurityREST插件。我签出了，我能理解的是，/api/login控制器是身份验证点，它以JSON格式接收用户凭据，并且在成功身份验证后，它提供acces令牌作为响应。我尝试用有效的JSON数据，使用。但它给了我以下的错误 401 Unauthorized , Similar to 403 Forbidden, but specific
/api/login401 Unauthorized , Similar to 403 Forbidden, but specifically for use when authentication is possible but has failed or not yet been provided. The response must include a WWW-Authenticate header field containing a challenge applicable to the requested resource.
/api/login/，但在控制台上获得401。这里有什么问题？这是正确的登录终点吗？如何使用JQuery进行身份验证？您可以尝试使用此代码进行身份验证，我正在请求头中发送用户id和密码，您可以随意尝试：- 注入以下服务：-
def springSecurityService
def authenticationManager
def login = {
final String authorization = request.getHeader("Authorization");
if (authorization != null && authorization.startsWith("Basic")) {
boolean authResult = authenticateUser(authorization)
if (authResult) {
render response.status
} else {
render authFailed(response)
}
} else {
render authFailed(response)
}
}
protected boolean authenticateUser(String authorization) {
// Authorization: Basic base64credentials
def base64Credentials = authorization.substring("Basic".length()).trim();
byte[] credentials = base64Credentials.decodeBase64()
String actualCredential = new String(credentials)
// credentials format like username:password
final String[] values = actualCredential.split(":", 2);
UsernamePasswordAuthenticationToken authRequest = new UsernamePasswordAuthenticationToken(values[0], values[1]);
try {
def authentication = authenticationManager.authenticate(authRequest);
def securityContext = SecurityContextHolder.getContext();
securityContext.setAuthentication(authentication);
def session = request.session;
session.setAttribute("SPRING_SECURITY_CONTEXT", securityContext);
}
catch (BadCredentialsException exception) {
return false
}
return true
}
protected HttpServletResponse authFailedResponse(HttpServletResponse response) {
response.setStatus(401)
response.setHeader("WWW-Authenticate", "Basic realm=\"nmrs_m7VKmomQ2YM3:\"")
return response;
}
$.ajax({
url: " http://localhost:8080/AppName/api/login",
type: "POST",
crossDomain: true,
data: JSON.stringify({"username":"yourusername" , "password":"yourpassword"}),
contentType: 'application/json; charset=utf-8',
dataType: "json",
success: function (response) {
console.log(response);
},
error: function (xhr, status) {
alert("error");
}
}) });
谢谢但是我必须在哪里使用这个代码呢？
/api/loginraw