update to Spring Security 4.0.3.RELEASE

build.gradle

@@ -59,9 +59,9 @@ dependencies {
 
 	compile 'org.grails.plugins:spring-security-core:3.0.0.M1'
 
-	String springSecurityVersion = '3.2.8.RELEASE'
+	String springSecurityVersion = '4.0.3.RELEASE'
 	compile "org.springframework.security:spring-security-cas:$springSecurityVersion", {
-		['cas-client-core', 'commons-logging', 'ehcache-core', 'fest-assert', 'javax.servlet-api', 'jcl-over-slf4j',
+		['cas-client-core', 'commons-logging', 'ehcache', 'fest-assert', 'javax.servlet-api', 'jcl-over-slf4j',
 		 'junit', 'logback-classic', 'mockito-core', 'spring-beans', 'spring-context', 'spring-core',
 		 'spring-security-core', 'spring-security-web', 'spring-test', 'spring-web'].each { exclude module: it }
 	}

grails-app/conf/DefaultCasSecurityConfig.groovy

@@ -17,13 +17,13 @@ security {
 		active = true
 		loginUri = null // must be set, e.g. '/login'
 		sendRenew = false
-		serviceUrl = null // must be set, e.g. 'http://localhost:8080/myapp/j_spring_cas_security_check'
+		serviceUrl = null // must be set, e.g. 'http://localhost:8080/myapp/login/cas'
 		serverUrlPrefix = null // must be set, e.g. 'http://localhost:9090/cas'
 		serverUrlEncoding = 'UTF-8'
 		key = 'grails-spring-security-cas'
 		artifactParameter = 'ticket'
 		serviceParameter = 'service'
-		filterProcessesUrl = '/j_spring_cas_security_check'
+		filterProcessesUrl = '/login/cas'
 		proxyCallbackUrl = null // should be set, e.g. 'http://localhost:8080/myapp/secure/receptor'
 		proxyReceptorUrl = null // should be set, e.g. '/secure/receptor'
 		useSingleSignout = true

src/docs/configuration.adoc

@@ -25,11 +25,11 @@ grails:
 | cas.serverUrlEncoding | 'UTF-8' | encoding for the server URL
 | cas.loginUri | `null`, must be set | the login URI, relative to `cas.serverUrlPrefix`, e.g. `/login`
 | cas.sendRenew | `false` | if true, ticket validation will only succeed if it was issued from a login form, but will fail if it was issued from a single sign-on session. Analogous to `IS_AUTHENTICATED_FULLY` in Spring Security
-| cas.serviceUrl | `null`, must be set | the local application login URL, e.g. `http://localhost:8080/ j_spring_cas_security_check`
+| cas.serviceUrl | `null`, must be set | the local application login URL, e.g. `http://localhost:8080/login/cas`
 | cas.key | 'grails-spring-security-cas', should be changed | used by `CasAuthenticationProvider` to identify tokens it previously authenticated
 | cas.artifactParameter | `'ticket'` | the ticket login url parameter
 | cas.serviceParameter | `'service'` | the service login url parameter
-| cas.filterProcessesUrl | '/j_spring_cas_security_check' | the URL that the filter intercepts for login
+| cas.filterProcessesUrl | '/login/cas' | the URL that the filter intercepts for login
 | cas.proxyCallbackUrl | `null`, should be set | proxy callback url, e.g. 'http://localhost:8080/secure/receptor'
 | cas.proxyReceptorUrl | `null`, should be set | proxy receptor url, e.g. '/secure/receptor'
 | cas.useSingleSignout | `true` | if `true` a `org.jasig.cas.client.session. SingleSignOutFilter` is registered

src/docs/usage.adoc

@@ -30,7 +30,7 @@ grails:
       springsecurity:
          cas:
             loginUri: /login
-            serviceUrl: http://localhost:8080/j_spring_cas_security_check
+            serviceUrl: http://localhost:8080/login/cas
             serverUrlPrefix: https://your-cas-server/cas
             proxyCallbackUrl: http://localhost:8080/secure/receptor
             proxyReceptorUrl: /secure/receptor

src/main/groovy/grails/plugin/springsecurity/cas/SpringSecurityCasGrailsPlugin.groovy

@@ -110,7 +110,7 @@ class SpringSecurityCasGrailsPlugin extends Plugin {
 			authenticationDetailsSource = ref('authenticationDetailsSource')
 			serviceProperties = ref('casServiceProperties')
 			proxyGrantingTicketStorage = ref('casProxyGrantingTicketStorage')
-			filterProcessesUrl = conf.cas.filterProcessesUrl // '/j_spring_cas_security_check'
+			filterProcessesUrl = conf.cas.filterProcessesUrl // '/login/cas'
 			continueChainBeforeSuccessfulAuthentication = conf.apf.continueChainBeforeSuccessfulAuthentication // false
 			allowSessionCreation = conf.apf.allowSessionCreation // true
 			proxyReceptorUrl = conf.cas.proxyReceptorUrl

testapps/spring-security-cas-test1/grails-app/conf/application.yml

@@ -81,7 +81,7 @@ grails:
             loginUri: /login
             serverUrlPrefix: http://localhost:9090/cas
             proxyReceptorUrl: /secure/receptor
-            serviceUrl: http://localhost:${server.port}/j_spring_cas_security_check
+            serviceUrl: http://localhost:${server.port}/login/cas
             proxyCallbackUrl: http://localhost:${server.port}/secure/receptor
          controllerAnnotations:
             staticRules:

testapps/spring-security-cas-test2/grails-app/conf/application.yml

@@ -81,7 +81,7 @@ grails:
             loginUri: /login
             serverUrlPrefix: http://localhost:9090/cas
             proxyReceptorUrl: /secure/receptor
-            serviceUrl: http://localhost:${server.port}/j_spring_cas_security_check
+            serviceUrl: http://localhost:${server.port}/login/cas
             proxyCallbackUrl: http://localhost:${server.port}/secure/receptor
          controllerAnnotations:
             staticRules: