grails-spring-security-core icon indicating copy to clipboard operation
grails-spring-security-core copied to clipboard

Published 20 hours ago • verified publisher icon grails

isDirty(), hasChanged() fails with Spring Security and MongoDB

Open pangeaos opened this issue 3 years ago • 0 comments

Expected Behavior

If there is NO any update property on the User object when it's saving, then the isDirty() function should work as expected. The UserPasswordEncoderListener.class should prevent any enconding password.

Actual Behaviour

The isDirty() function is not working on the UserPasswordEncoderListener.class, every time I save a user object that has NO updates always return true, causing an already encoded password to be re-encoded and thereby breaking authentication.

User Controller In the UserController, testing the isDirty function worked as expected. Screen Shot 2022-06-03 at 8 53 50 PM

UserPasswordEncoderListener.class In the class doesn't work. Screen Shot 2022-06-03 at 8 54 03 PM

You can check the logs. Screen Shot 2022-06-03 at 8 54 11 PM

Any idea?

Steps To Reproduce

No response

Environment Information

  • Mac OS X

  • openjdk version "11.0.14.1" 2022-02-08 LTS

  • OpenJDK Runtime Environment Corretto-11.0.14.10.1 (build 11.0.14.1+10-LTS)

  • OpenJDK 64-Bit Server VM Corretto-11.0.14.10.1 (build 11.0.14.1+10-LTS, mixed mode)

  • MongoDB

  • Spring Security Core Plugin

Example Application

No response

Version

5.1.8

pangeaos avatar Jun 04 '22 03:06 pangeaos