Security — Spring Security & JWT
Common approaches: Spring Security Core plugin for session-based auth, or JWT for stateless APIs.
Spring Security — basic setup
dependencies {
implementation 'org.grails.plugins:spring-security-core:5.0.0'
}
Configure domain classes User and Role, then run grails s2-quickstart com.example User Role.
JWT
Use spring-security-oauth2-resource-server or Micronaut security for JWT verification at the gateway.