Crowd Plugin

CrowdAuthSecurityFilters not preventing controller methods from running when not authenticated

Details

  • Type: Bug Bug
  • Status: Resolved Resolved
  • Priority: Minor Minor
  • Resolution: Fixed
  • Affects Version/s: Grails-Crowd 0.3, Grails-Crowd 0.4
  • Fix Version/s: Grails-Crowd 0.5
  • Component/s: None
  • Labels:
    None

Description

Methods in my controllers are being called, even though:

  • My controller has def static authenticate = true
  • CrowdAuthUtils.isAuthenticated(request) returns false

However, the user is redirected (correctly) to the login screen - I'm just seeing stacktraces in the logs.

I think it's because CrowdAuthSecurityFilters has return instead of return false at lines 145, 150 and 155.

Activity

Hide
Graham Bakay added a comment -

Thanks Kate! I'll look into this one right away...

Show
Graham Bakay added a comment - Thanks Kate! I'll look into this one right away...

People

Vote (0)
Watch (0)

Dates

  • Created:
    Updated:
    Resolved: