使用Grails Spring Security插件登录的其他字段

Question

My question is similar to this one

How to pass an additional parameter with spring security login page

though it applies to Grails Spring Security plugin. If I have to support an additional field in login (company name) , how do I do it in Grails?

I will get the company name field from the URL.

For example. /login?companyname=c1 /login?companyname=c2

The same user name can be used by different users in different companies. So user name is not unique but user name + company name is unique.

Thanks in Advance.

Answer 1

This is not nice solution but you can join username and company name into single username field. For example oneUser_company1 , oneUser_company2 . In that case, you would have to create multiple accounts for single user.

Answer 2

I think that this custom filter is a start point.

Probably you will need a custom AuthenticationToken to store your company name, instead of using UsernamePasswordAuthenticationToken .

You will need an AuthenticationProvider too, since you will need to get your user by username and company.

The flow will be:

• Filter will create your custom AuthenticationToken , storing the company field.
• Your custom AuthenticationProvider will get this token and try to load the user by username and company
• Spring Security Core will check your password