Spring -security remember me not working

I am writing the code below in config.groovy

grails.plugins.springsecurity.providerNames = [
    'rememberMeAuthenticationProvider'
]

grails.plugin.springsecurity.rememberMe.cookieName='grails_remember_me'
grails.plugin.springsecurity.rememberMe.alwaysRemember=false
grails.plugin.springsecurity.rememberMe.tokenValiditySeconds=31*24*60*60
grails.plugin.springsecurity.rememberMe.parameter='_spring_security_remember_me'
grails.plugin.springsecurity.rememberMe.key='monitoringApp' 
grails.plugin.springsecurity.rememberMe.useSecureCookie=false
grails.plugin.springsecurity.rememberMe.persistent=false
grails.plugin.databasemigration.updateOnStart = true

I will write the code below on the gsp page

<div class="col-xs-7">
<div class="checkbox">
<label>
<input type='checkbox' name='_spring_security_remember_me' id='remember_me'
<g:if test='${hasCookie}'>checked='checked'</g:if>/>
<g:message code="springSecurity.login.remember.me.label"/>
</label>
</div>
</div>

My controller all actions are fully authenticated using spring security @Secured(['IS_AUTHENTICATED_FULLY'])But I can not take advantage of spring security, remember the functionality. Please help me.

I am using Grails version 2.3.0 and spring security: "spring-security-core: 2.0-RC2"

+4
source share
1 answer

The reason your users who used the Remember Me feature in Spring are still requesting a username because this is IS_AUTHENTICATED_REMEMBEREDnot the same as IS_AUTHENTICATED_FULLY.

IS_AUTHENTICATED_REMEMBERED , cookie mem-me .

IS_AUTHENTICATED_FULLY , .

.

, , IS_AUTHENTICATED_REMEMBERED IS_AUTHENTICATED_FULLY, .

+8

Source: https://habr.com/ru/post/1544340/


All Articles