Groovy and Grails Recipes

CHAPTER 14Security

In this chapter, I talk about two kinds of security: securing your application from malicious attacks, and using authentication and authorization. Securing your application from malicious attacks is a broad topic, and many books have been written specifically about it¹. Instead of going into general security design guidelines that apply to any web framework or application, in this chapter I cover mainly the specific features that Grails offers developers to guard against attacks.

There are many ways to implement authentication and authorization in your application. You can roll your own or use an existing security framework. In this chapter, I present both ways. I will show you first how simple it is to implement basic authentication ...