RFC7617 defines the "Basic" Hypertext Transfer Protocol (HTTP) authentication scheme, which transmits credentials as user-id/password pairs, encoded using Base64.

In this guide you are going to create a Grails app and secure it with HTTP Basic Auth.

To complete this guide, you will need the following:

To get started do the following:

or

The Grails guides repositories contain two folders:

To complete the guide, go to the initial folder

and follow the instructions in the next sections.

If you want to start from scratch, create a new Grails 3 application using Grails Application Forge.

Create an app with the rest-api profile

grails create-app example --profile=rest-api

First thing we need to do is add the spring-security-core Grails Plugin to build.gradle.

Then run the command:

grails s2-quickstart example.grails User Role

The command generates the following domain classes:

a password encoder listener:

src/main/groovy/example.grails.UserPasswordEncoderListener

and default security configuration at:

Modify the generated application.groovy to enable basic auth.

Create HomeController which returns the username of the authenticated user.

Render the controller output as a JSON Payload with the aid of JSON Views.

Create a GORM Data service to ease User domain class CRUD operations.

Create a test which verifies the user authentication flow via Basic Auth.

Read Basic and Digest Authentication section of the Grails Springs Security Core Plugin documentation to learn about the different configuration options available for Basic Authentication.