Home/ Questions/Q 5950285
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-05-22T17:22:19+00:00

I’m currently working with Grails and the Spring Security plugin and trying to implement

  • 0

I’m currently working with Grails and the Spring Security plugin and trying to implement a password expiration workflow. I’ve configured the plugin as expected:

grails.plugins.springsecurity.failureHandler.exceptionMappings = [
    'org.springframework.security.authentication.CredentialsExpiredException': '/login/passwordExpired'
]

and in my passwordExpired action if I call:

def username = session['SPRING_SECURITY_LAST_USERNAME']

then in the username the HTML special characters are going to be escaped like

my_user => my_user
my-user => my-user

Is it possible to turn this escaping off?

Ritesh mentioned here spring_security_last_username that the SPRING_SECURITY_LAST_USERNAME is deprecated, so what else can I use?

For any help, thanks in advance!

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    The String 'SPRING_SECURITY_LAST_USERNAME' isn’t deprecated – the old constant with that value is and has been moved with a new name but the same value. So your code will continue to be valid.

    Rather than changing things to not escape, you can un-escape easily:

    import org.apache.commons.lang.StringEscapeUtils
...
String username = StringEscapeUtils.unescapeHtml(session['SPRING_SECURITY_LAST_USERNAME'])
    • 0