6

I am writing a RESTful webservice on grails, using rest spring security api. All good... now I want to login a user on registration, there is a registration action, and up on registration completion, i would like to login that user. I found:

springSecurityService.reauthenticate(username) method

but that only login the user, but doesnt create access token in authentication_token table.

Is there other possible way to login and get the access token for that user?

sufyan.shoaib
  • 1,117
  • 9
  • 19

1 Answers1

10

The plugin is designed for applications where the frontend (a pure HTML/JS client using, for example, AngularJS) is separated from the backend (your Grails app). In such scenario, the backend has to send back the frontend the access token, and the frontend has to store it somehow (usually using local storage or cookies), to pass it as an HTTP on every subsequent request.

You can do something like this in your controller:

class RegisterController {

    def springSecurityService
    def tokenGenerator
    def tokenStorageService

    def register() {
         //do stuff
         springSecurityService.reauthenticate(username)
         String tokenValue = tokenGenerator.generateToken()
         tokenStorageService.storeToken(tokenValue, springSecurityService.principal)

         redirect url: "http://example.org/?access_token=${tokenValue}"
    } 
}

Then, the frontend can grab the token from the URL and pass it on every subsequent API request.

Álvaro Sánchez-Mariscal
  • 884
  • 7
  • 14
  • 1
    And what bout the `refresh_token` in this case? How do I get a new token when this one expires? Will the old one work? – lealceldeiro Jun 27 '17 at 13:30