Auditing your Spring Security mappings with Groovy

GetAuthMappings.groovy

//Add net.sf.corn:corn-cps:1.0.1 to your classpath
import net.sf.corn.cps.*
import org.springframework.stereotype.Controller
import org.springframework.web.bind.annotation.RequestMapping
import org.springframework.security.access.prepost.PreAuthorize

def classes = CPScanner.scanClasses(new PackageNameFilter("com.company.*"), new ClassFilter().appendAnnotation(Controller))
classes.each { clazz -> 
    clazz.getDeclaredMethods().each { method ->
        RequestMapping mapping = method.getAnnotation(RequestMapping)
        if (mapping != null){
            PreAuthorize auth = method.getAnnotation(PreAuthorize)
            if (auth != null){
                println "URL: " + mapping.value()
                println "PERM: " + auth.value()
                println "------"
            }
        }
    }
}
return "DONE!"