(Quick Reference)

4 Changelog

4.1 Grails 3.x

Version 3.0.1

• Fix security issue where resource paths defined with upper case letters do not properly match against incoming requests. In practice, if Spring Security was configured to allow requests when no security rule was found, security could be bypassed for paths with upper case letters.

Version 3.0.0

• Update plugin for Grails 3.x. (thanks to Donald Jackson!)
• Update definition classes to match new Spring Security Core counterparts.
• Renamed project packages to org.grails.plugins.spring.security.jaxrs. This should not impact anyone unless the classes contained in this package have been extended.

4.2 Grails 2.x

Version 1.0.2

• Fix bug where Jax-RS security rules would only check the first rules in the list that matched the request HTTP method, and failed when a different HTTP method was encountered.

Version 1.0.1

• Fix broken SCM, documentation, and issues URLs.

Version 1.0.0

• Initial public release.
• Refactor the Jax-RS filter invocation definition classes so they do not extend the base Grails Spring Security version.

Version 0.5.7

• Internal release.