Spring Security REST GORM

{
    "username": "admin",
    "roles": [
        "ROLE_ADMIN",
        "ROLE_EDITOR"
    ],
    "token_type": "Bearer",
    "access_token": "7kk8q7pgs3ca3d7sf6ifmab54ciap2kk"
}

gb:
    rest:
      prefix: /api
    springsecurity:
      rest:
        active: true
        login:
          active: true
          endpointUrl: /api/login
          usernamePropertyName: username
          passwordPropertyName: password
          failureStatusCode: 401  # HttpServletResponse.SC_UNAUTHORIZED
          useJsonCredentials: true
          useRequestParamsCredentials: false
        logout:
          endpointUrl: /api/logout
        token:
          generation:
            useSecureRandom: true
            useUUID: false
            jwt:
              issuer: Spring Security REST Plugin
              algorithm: HS256
              jweAlgorithm: RSA-OAEP
              encryptionMethod: A128GCM
          storage:
            useJwt: false                                                                   (1)
            useGorm: true                                                                   (2)
            gorm:
              tokenDomainClassName: org.yunchen.example.domain.rest.AuthenticationToken  (3)
              tokenValuePropertyName: tokenValue                                            (4)
              usernamePropertyName: username                                                (5)
              autoAccessCount: true                                                         (6)
            jwt:
              useSignedJwt: false                                                           (7)
              useEncryptedJwt: false                                                        (8)
              privateKeyPath: /home/.priavte/
              publicKeyPath: /home/.public
              secret: atlease256bits(The secret length must be at least 256 bits)
              expiration: 3600
          validation:
            active: true
            headerName: X-Auth-Token
            endpointUrl:  /api/validate
            tokenHeaderMissingStatusCode: 401   #HttpServletResponse.SC_UNAUTHORIZED
            enableAnonymousAccess: false
            useBearerToken: true
          rendering:
            usernamePropertyName: username
            tokenPropertyName: access_token
            authoritiesPropertyName:  roles

import com.fasterxml.jackson.annotation.JsonIgnoreProperties
import grails.persistence.Entity

@Entity
@Title(zh_CN = "认证Token")
@JsonIgnoreProperties(["errors", "metaClass", "dirty", "attached", "dirtyPropertyNames","handler","target","session","entityPersisters","hibernateLazyInitializer","initialized","proxyKey","children","menuItems"])
class AuthenticationToken {
    String tokenValue
    String username
    Date dateCreated
    Date lastUpdated
    Integer accessCount = 0

    static constraints = {
        tokenValue(maxSize: 2000)
    }
    static mapping = {
        version false
    }
}

import org.yunchen.example.domain.rest.AuthenticationToken
import org.springframework.beans.factory.annotation.Configurable
import org.springframework.scheduling.annotation.EnableScheduling
import org.springframework.scheduling.annotation.Scheduled
import org.springframework.stereotype.Component

@Component
@Configurable
@EnableScheduling
class RemoveStaleTokensTask {
    @Scheduled(cron = "0 0 */1 * * *")
    public void execute(){
        AuthenticationToken.withNewSession {
            AuthenticationToken.executeUpdate('delete AuthenticationToken a where a.lastUpdated < ?',[new Date()-1])
        }
    }
}