basicAuth(controller: 'hash', action: '*') {
before = {
if(!ValidationUtil.validate(request,response, log, grailsApplication)){
render(text: "User not known.")
return
}
}
}

}
}

/**
* Basic Authentication
* return false if login failed, and true if login is successful
*
* The HTTP status code and the HTTP header of the response are set as this :
*
* "Authorization" not present in the header of the request :
* - status : 401
* - add hedaer : WWW-Authenticate: Basic realm="Secure Area"
*
* "Authorization" present, but bad login / password
* - status : 403
*
*/
class ValidationUtil{
static validate(def request, def response, def log, def grailsApplication){
try {
def authString = request.getHeader('Authorization')
if (!authString) {
response.status = 401
response.addHeader("WWW-Authenticate", "Basic realm=\"Secure Area\"")
return false
}
def encodedPair = authString - 'Basic '
def decodedPair = new String(new sun.misc.BASE64Decoder().decodeBuffer(encodedPair));
def credentials = decodedPair.split(':')
def login = grailsApplication.config.admin.security.login
def password = grailsApplication.config.admin.security.password