`<sec:loggedInUserInfo>` tag is not working in GSP layouts

[andr3aLucch3si85]

Expected Behavior

Using grails 7.0.0-M3 with spring-secutiry-core plugin 7.0.0-M3 after login TagLib function <sec:loggedInUserInfo field="username"/> should return username of the user.

Actual Behaviour

loggedInUserInfo doesn't return info because SCH.context.authentication is null

Steps To Reproduce

No response

Environment Information

Java version: 17

Example Application

No response

Version

7.0.0-M3

[jdaugherty]

I'm unable to reproduce this. I used the plugin-core/examples/functional-test-app that's in the repository:

1. call testData/addTestUsers URL to add users
2. use the default admin / password to login to indexAnnotated
3. place debug point in the index action, and SecurityContextHolder.context.authentication is defined.

Can you please provide an example application? The filter order has changed in later versions of Spring Security. If you were using a custom filter order it could explain this problem.

[andr3aLucch3si85]

Sorry but I can't share code.. The login process ends with success. After that I have a simple view that must display the username and some parts based on user's role.
For example:

loggedUserInfo is called

At line 113 isLoggedIn returns false. The implementation of isLoggedIn is in my first post and the problem is that authentication is null.

[jdaugherty]

Without an example application to reproduce, we cannot help
you further. The functional test application is working so it must be related to a configuration difference or a nonstandard configuration for newer versions of Spring Security.

[andr3aLucch3si85]

test-login.zip

I've done a basic project. To reproduce bug:

1. Start program
2. Login with admin admin (sometimes it requires login again)

Dashboard.gsp include logged.gsp in head. logged.gsp calls <sec:loggedInUserInfo field="username"/> but springSecurityService.isLoggedIn() returns false.

Thanks

[matrei]

@andr3aLucch3si85 In your test app, I can reproduce that <sec:loggedInUserInfo field="username"/> works in a GSP page but not in a GSP layout. Does this accurately describe the issue you're experiencing?

[andr3aLucch3si85]

Yes! In logged.gsp layout <sec:loggedInUserInfo field="username"/> doesn't work. On frontend I can't see the username but only "Ciao !"

[matrei]

Thank you!

[andr3aLucch3si85]

I have probably found a workaround. I have included logged.gsp using g:render tag and it works!

[andr3aLucch3si85]

No... That is not a valid solution!

How will this look with the release of grails 7?

[jamesfredley]

Please retest <sec:loggedInUserInfo field="username"/> with 7.0.0-RC1 or 7.0.0-SNAPSHOT now that the default is back to sitemesh 2. It should work the same as it has in the past now.

It works again! tested on grails 7.0.0-RC1