The Definitive Guide to Grails, Second Edition

CHAPTER 14Security

Security is a broad topic that is applicable across multiple layers of your application. From the view layer to the database, making your application immune to the various forms of attack is a nontrivial task. Scary things like cross-site scripting (XSS) and SQL injection attacks require careful attention when building your application. As well as covering techniques that help avoid such attacks, in this chapter we'll cover how you can secure your application through authentication and authorization.

Authentication refers to the act of establishing a client's identity. The ubiquitous login form is typically used to establish identity in web applications. Authorization, on the other hand, is about granting a client specific ...