see my commented out attempts for force secure login it forces to https but the logins themselves fail so I commented it back out I was testing with -https flag and the flag that tells it what port to put https on
see my commented out attempts for force secure login
it forces to https but the logins themselves fail so I commented it back
out
I was testing with -https flag and the flag that tells it what port to
put https on
// locations to search for config files that get merged into the main config;
// config files can be ConfigSlurper scripts, Java properties files, or classes
// in the classpath in ConfigSlurper format

// grails.config.locations = [ "classpath:${appName}-config.properties",
//                             "classpath:${appName}-config.groovy",
//                             "file:${userHome}/.grails/${appName}-config.properties",
//                             "file:${userHome}/.grails/${appName}-config.groovy"]

// if (System.properties["${appName}.config.location"]) {
//    grails.config.locations << "file:" + System.properties["${appName}.config.location"]
// }

grails.project.groupId = appName // change this to alter the default package name and Maven publishing destination
grails.mime.file.extensions = true // enables the parsing of file extensions from URLs into the request format
grails.mime.use.accept.header = false
grails.mime.types = [
    all:           '*/*',
    atom:          'application/atom+xml',
    css:           'text/css',
    csv:           'text/csv',
    form:          'application/x-www-form-urlencoded',
    html:          ['text/html','application/xhtml+xml'],
    js:            'text/javascript',
    json:          ['application/json', 'text/json'],
    multipartForm: 'multipart/form-data',
    rss:           'application/rss+xml',
    text:          'text/plain',
    xml:           ['text/xml', 'application/xml']
]

// URL Mapping Cache Max Size, defaults to 5000
//grails.urlmapping.cache.maxsize = 1000

// What URL patterns should be processed by the resources plugin
grails.resources.adhoc.patterns = ['/images/*', '/css/*', '/js/*', '/plugins/*']

// The default codec used to encode data with ${}
grails.views.default.codec = "none" // none, html, base64
grails.views.gsp.encoding = "UTF-8"
grails.converters.encoding = "UTF-8"
// enable Sitemesh preprocessing of GSP pages
grails.views.gsp.sitemesh.preprocess = true
// scaffolding templates configuration
grails.scaffolding.templates.domainSuffix = 'Instance'

// Set to false to use the new Grails 1.2 JSONBuilder in the render method
grails.json.legacy.builder = false
// enabled native2ascii conversion of i18n properties files
grails.enable.native2ascii = true
// packages to include in Spring bean scanning
grails.spring.bean.packages = []
// whether to disable processing of multi part requests
grails.web.disable.multipart=false

// request parameters to mask when logging exceptions
grails.exceptionresolver.params.exclude = ['password']

// configure auto-caching of queries by default (if false you can cache individual queries with 'cache: true')
grails.hibernate.cache.queries = false

grails {
	mail {
		host='email-smtp.us-east-1.amazonaws.com'
		port=465
		props = [
			'mail.smtp.auth': 'true',
			'mail.smtp.socketFactory.port':'465',
			"mail.smtp.socketFactory.class": "javax.net.ssl.SSLSocketFactory",
			"mail.smtp.socketFactory.fallback": "false"
		]
	}
}

environments {
    development {
        grails.logging.jul.usebridge = true
    }
    production {
        grails.logging.jul.usebridge = false
        // TODO: grails.serverURL = "http://www.changeme.com"
    }
}

// log4j configuration
log4j = {
    // Example of changing the log pattern for the default console appender:
    //
	appenders {
		console name:'stdout', layout:pattern(conversionPattern: '%c{2} %m%n'), threshold: org.apache.log4j.Level.INFO
		file name: 'file', layout:pattern(conversionPattern: '%d{dd-MM-yyyy HH:mm:ss} %p %c{2} - %m%n'), file: './ST.log', threshold: org.apache.log4j.Level.DEBUG
    }
	root {
		org.apache.log4j.Level.OFF
	}
	
	environments {
		development {
			info	stdout:	['com.sra', 'grails.app.conf'], additivity: false
		}
	}
    debug	file:	['com.sra', 'grails.app.conf'], additivity: false
}

grails.app.context="/"

grails.plugin.springsecurity.providerNames = [
	'daoAuthenticationProvider',
	'anonymousAuthenticationProvider',
	'rememberMeAuthenticationProvider',
	'clientCredentialsAuthenticationProvider'
]

//grails.plugin.springsecurity.auth.loginFormUrl = '/saml/auth'

// Added by the Spring Security Core plugin:
//added line below to attempt to force https -- SWB
//grails.plugin.springsecurity.auth.forceHttps = true
//line below to tell it to use 443
//grails.plugin.springsecurity.portMapper.httpsPort=443
grails.plugin.springsecurity.logout.postOnly = false
grails.plugin.springsecurity.userLookup.userDomainClassName = 'com.sra.User'
grails.plugin.springsecurity.userLookup.authorityJoinClassName = 'com.sra.UserRole'
grails.plugin.springsecurity.authority.className = 'com.sra.Role'
//force login secure??? --SWB
/*
grails.plugin.springsecurity.secureChannel.definition = [
	'/login/**': 'REQUIRES_SECURE_CHANNEL',
	'/j_spring_security_check': 'REQUIRES_SECURE_CHANNEL'
	]
*/
grails.plugin.springsecurity.controllerAnnotations.staticRules = [
	'/':                              ['permitAll'],
	'/index':                         ['permitAll'],
	'/index.gsp':                     ['permitAll'],
	'/**/js/**':                      ['permitAll'],
	'/**/css/**':                     ['permitAll'],
	'/**/images/**':                  ['permitAll'],
	'/**/favicon.ico':                ['permitAll'],
	'/logout/**':					  ['permitAll'],
	'/saml/**':						  ['permitAll'],
	'/searchable/**':				  ['ROLE_ADMIN'],
	'/user/**':						  ['ROLE_ADMIN'],
	'/role/**':						  ['ROLE_ADMIN'],
	'/registrationCode/**':			  ['ROLE_ADMIN'],
	'/securityInfo/**':				  ['ROLE_ADMIN'],
	'/oauth/authorize.dispatch':	  ['IS_AUTHENTICATED_REMEMBERED'],
    '/oauth/token.dispatch':		  ['IS_AUTHENTICATED_REMEMBERED']
]

// locations to search for config files that get merged into the main config;
// config files can be ConfigSlurper scripts, Java properties files, or classes
// in the classpath in ConfigSlurper format

// grails.config.locations = [ "classpath:${appName}-config.properties",
//                             "classpath:${appName}-config.groovy",
//                             "file:${userHome}/.grails/${appName}-config.properties",
//                             "file:${userHome}/.grails/${appName}-config.groovy"]

// if (System.properties["${appName}.config.location"]) {
//    grails.config.locations << "file:" + System.properties["${appName}.config.location"]
// }

grails.project.groupId = appName // change this to alter the default package name and Maven publishing destination
grails.mime.file.extensions = true // enables the parsing of file extensions from URLs into the request format
grails.mime.use.accept.header = false
grails.mime.types = [
    all:           '*/*',
    atom:          'application/atom+xml',
    css:           'text/css',
    csv:           'text/csv',
    form:          'application/x-www-form-urlencoded',
    html:          ['text/html','application/xhtml+xml'],
    js:            'text/javascript',
    json:          ['application/json', 'text/json'],
    multipartForm: 'multipart/form-data',
    rss:           'application/rss+xml',
    text:          'text/plain',
    xml:           ['text/xml', 'application/xml']
]

// URL Mapping Cache Max Size, defaults to 5000
//grails.urlmapping.cache.maxsize = 1000

// What URL patterns should be processed by the resources plugin
grails.resources.adhoc.patterns = ['/images/*', '/css/*', '/js/*', '/plugins/*']

// The default codec used to encode data with ${}
grails.views.default.codec = "none" // none, html, base64
grails.views.gsp.encoding = "UTF-8"
grails.converters.encoding = "UTF-8"
// enable Sitemesh preprocessing of GSP pages
grails.views.gsp.sitemesh.preprocess = true
// scaffolding templates configuration
grails.scaffolding.templates.domainSuffix = 'Instance'

// Set to false to use the new Grails 1.2 JSONBuilder in the render method
grails.json.legacy.builder = false
// enabled native2ascii conversion of i18n properties files
grails.enable.native2ascii = true
// packages to include in Spring bean scanning
grails.spring.bean.packages = []
// whether to disable processing of multi part requests
grails.web.disable.multipart=false

// request parameters to mask when logging exceptions
grails.exceptionresolver.params.exclude = ['password']

// configure auto-caching of queries by default (if false you can cache individual queries with 'cache: true')
grails.hibernate.cache.queries = false

grails {
	mail {
		host='email-smtp.us-east-1.amazonaws.com'
		port=465
		props = [
			'mail.smtp.auth': 'true',
			'mail.smtp.socketFactory.port':'465',
			"mail.smtp.socketFactory.class": "javax.net.ssl.SSLSocketFactory",
			"mail.smtp.socketFactory.fallback": "false"
		]
	}
}

environments {
    development {
        grails.logging.jul.usebridge = true
    }
    production {
        grails.logging.jul.usebridge = false
        // TODO: grails.serverURL = "http://www.changeme.com"
    }
}

// log4j configuration
log4j = {
    // Example of changing the log pattern for the default console appender:
    //
	appenders {
		console name:'stdout', layout:pattern(conversionPattern: '%c{2} %m%n'), threshold: org.apache.log4j.Level.INFO
		file name: 'file', layout:pattern(conversionPattern: '%d{dd-MM-yyyy HH:mm:ss} %p %c{2} - %m%n'), file: './ST.log', threshold: org.apache.log4j.Level.DEBUG
    }
	root {
		org.apache.log4j.Level.OFF
	}
	
	environments {
		development {
			info	stdout:	['com.sra', 'grails.app.conf'], additivity: false
		}
	}
    debug	file:	['com.sra', 'grails.app.conf'], additivity: false
}

grails.app.context="/"

grails.plugin.springsecurity.providerNames = [
	'daoAuthenticationProvider',
	'anonymousAuthenticationProvider',
	'rememberMeAuthenticationProvider',
	'clientCredentialsAuthenticationProvider'
]

//grails.plugin.springsecurity.auth.loginFormUrl = '/saml/auth'

// Added by the Spring Security Core plugin:
grails.plugin.springsecurity.logout.postOnly = false
grails.plugin.springsecurity.userLookup.userDomainClassName = 'com.sra.User'
grails.plugin.springsecurity.userLookup.authorityJoinClassName = 'com.sra.UserRole'
grails.plugin.springsecurity.authority.className = 'com.sra.Role'
grails.plugin.springsecurity.controllerAnnotations.staticRules = [
	'/':                              ['permitAll'],
	'/index':                         ['permitAll'],
	'/index.gsp':                     ['permitAll'],
	'/**/js/**':                      ['permitAll'],
	'/**/css/**':                     ['permitAll'],
	'/**/images/**':                  ['permitAll'],
	'/**/favicon.ico':                ['permitAll'],
	'/logout/**':					  ['permitAll'],
	'/saml/**':						  ['permitAll'],
	'/searchable/**':				  ['ROLE_ADMIN'],
	'/user/**':						  ['ROLE_ADMIN'],
	'/role/**':						  ['ROLE_ADMIN'],
	'/registrationCode/**':			  ['ROLE_ADMIN'],
	'/securityInfo/**':				  ['ROLE_ADMIN'],
	'/oauth/authorize.dispatch':	  ['IS_AUTHENTICATED_REMEMBERED'],
    '/oauth/token.dispatch':		  ['IS_AUTHENTICATED_REMEMBERED']
]
