Question

I have just started using grails and installed the spring-security and spring-security-ui plugins. I am following the tutorial given here. The application starts with one bootstrapped user me with ROLE_ADMIN permission.

With the UI override scripts I was able to get the register functionality up and running and it works all right. Now, I have installed the User Management scripts (grails s2ui-override user) to try adding, editing, removing users.

A new user gets created fine, I have checked this against the HSQLDB instance. However, if I now log-out from the application and try to login with the newly created user the application tells me that it is unable to find a user with the provided username and password.

I haven’t modified the default logout handling so am using /j_spring_security_logout which as the documentation says invalidates the session.

Is this a know issue? If so how can I get around this or if not how can I debug this issue?

EDIT:

This issue is also persisting without the UI addition. Register as a new user. Once you finish e-mail verification you are auto-logged in to the site. Now logout and try to login in back again. It gives the same error.

FINAL EDIT:

The UI plugin comes with the RegisterController that still encodes the password. However, the newer domain classes that come with the core are also doing this and the recommended practice is that controllers shouldn’t. I commented out a line that does the encoding and the login/logout works now at least for the basic scenario.

Answer 1

There is a warning on that tutorial

Earlier versions of the plugin didn’t include password encryption logic in the domain class, but it makes the code a lot cleaner.

I am guessing security-ui plugin does not know about that change, and comparing unencrypted password with the encrypted one on the database.