Security — Spring Security & JWT

Common approaches: Spring Security Core plugin for session-based auth, or JWT for stateless APIs.

Spring Security — basic setup

dependencies {
  implementation 'org.grails.plugins:spring-security-core:5.0.0'
}

Configure domain classes User and Role, then run grails s2-quickstart com.example User Role.

JWT

Use spring-security-oauth2-resource-server or Micronaut security for JWT verification at the gateway.