CODEWITHSUNDEEP
grailsspring-securitysession-timeout
dildik
dildik

Reputation: 405

Grails Spring Security Redirect after Session-Timeout

I have an issue with the Session Timeout. In my grails application an user logs in after a session timeout, but then gets to the last edited page. I want to prevent that and send them to a specific URL. How can I achieve this, I cant find something in the spring security documentation.

Greetings.

Upvotes: 3

Views: 3388

Answers (2)

moeTi
moeTi

Reputation: 3904

By default spring security will forward the original request after successful login. You can prevent that by adding the following to Config.groovy:

grails.plugins.springsecurity.successHandler.alwaysUseDefault = true
grails.plugins.springsecurity.successHandler.alwaysUseDefaultTargetUrl = true
grails.plugins.springsecurity.successHandler.defaultTargetUrl = '/my/default/url'

The two properties sound like they should do the same, but in my case it only works when I have them both. Perhaps you can remove one of them and get it to work...

This will alter the behavior any time you log in, not just after a timeout. If you need a more dynamic solution, I guess you have to dig into the spring security source code...

Upvotes: 1

Gregg
Gregg

Reputation: 35864

Per the docs, it looks like you might be able to use a combination of:

successHandler.defaultTargetUrl="/whatever/url/you/want"
successHandler.alwaysUseDefault=true

Upvotes: 2

Related Questions