Custom UserDetailsService Not Being Called - Grails & Spring Security Core

Question

I'm using Grails v2.4.2 with spring-security-rest, spring-security-core, and spring-security-ui plugins.

I've written a custom UserDetailsService to make the username case-insensitive. All I am doing is simply trying to override

UserDetails loadUserByUsername(String username, boolean loadRoles) throws UsernameNotFoundException

My com.example.core.CaseInsensitiveUserDetailsService class is defined as:

class CaseInsensitiveUserDetailsService extends GormUserDetailsService {

    /**
     * Make The Username Case Insensitive
     */
    UserDetails loadUserByUsername(String username, boolean loadRoles) throws UsernameNotFoundException {
        Person.withTransaction { status ->

            log.debug "Case Insensitive User Details Service"

            // Find The Username
            def user = Person.findByUsernameIlike(username)

            // If User Not Found, Throw Exception
            if (!user) {
                log.warn "User not found: $username"
                throw new UsernameNotFoundException('User not found', username)
            }

            Collection<GrantedAuthority> authorities = loadAuthorities(user, username, loadRoles)
            createUserDetails user, authorities
        }
    }
}

My resources.groovy contains:

beans = {

    userDetailsService(com.example.core.CaseInsensitiveUserDetailsService)

    credentialsExtractor(Grails24CredentialExtractor)

    // Some Custom Filters Are Also Defined (securityContextRepository, securityContextPersistenceFilter, multipartResolver)

}

It compiles succesfully, but it never actually runs my custom CaseInsensitiveUserDetailsService. In the console, I see debug statements from the actual GormUserDetailsService instead of my custom one. What can be done to use my custom UserDetailsService?

** Note: I've been following these two tutorials:

Have you created this as a plugin that is then installed into an application? — John, Apr 14 '15 at 15:19
Can you show your configuration (interested in the the security and logging sections) and the output of the request and the response? — Álvaro Sánchez-Mariscal, Apr 15 '15 at 09:25

score 0 · Answer 1 · answered Apr 14 '15 at 18:51

0

I had a similar problem when doing something similar with a different plugin and Spring Security, and the wiring needed to be made explicitly to be by name. Try in resources.groovy:

userDetailsService(com.example.core.CaseInsensitiveUserDetailsService) { bean->
    bean.autowire = "byName"
}

answered Apr 14 '15 at 18:51

John

10,837
17
78
141

This makes no sense. Autowiring is more convenient since you don't need to explicitly define each one, but you can always do that if you want – Burt Beckwith Apr 15 '15 at 00:25

score 0 · Answer 2 · answered Mar 08 '17 at 19:20

0

I wrote this example for educational(self) purposes, perhaps it might help: https://github.com/grails-coder/grails-spring-security

It regards to:

Authentication Providers
Custom UserDetailsService

Kindly notice it's on top of grails 3.2.5

answered Mar 08 '17 at 19:20

darkstar_mx

456
5
8

Custom UserDetailsService Not Being Called - Grails & Spring Security Core

2 Answers2

Linked