I followed the example screencast by Peter Ledbrook on using the spring security core. I set the password on my user as follows:
springSecurityService.encodePassword("password")
When I attempt to log in, it doesn’t decrypt the password properly. If I change the app to not encrypt the password, it will log in perfectly.
I looked at the auto-generated Login controller and I am not seeing where it’s doing the decryption of the password. Has anyone else had this problem? Is there something that I am missing to make this work?
Thanks!
As of version 1.2 the User domain class encrypts the password, so by using
springSecurityService.encodePasswordyou’re double-encoding. See the docs: http://grails-plugins.github.com/grails-spring-security-core/docs/manual/