You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@solr.apache.org by Christos Malliaridis <c....@gmail.com> on 2025/09/26 11:57:48 UTC

SOLR-17930: Improving MultiAuthPlugin in Solr 10

Hello everyone,

While working on the new UI and fixing some issues in the web-target, I
noticed some "limitations" of the MultiAuthPlugin for web clients that I
would like to change in Solr 10.

SOLR-17930 <https://issues.apache.org/jira/browse/SOLR-17930> describes the
issue in detail, and PR #3703
<https://github.com/apache/solr/pull/3703> contains
the improvement proposed. It should have a small impact for existing
consumers. With the fix the new UI (and other web-clients) are capable of
displaying multiple authentication options simultaneously when
MultiAuthPlugin is used (once implemented), and also support xBasic in
MultiAuthPlugin for BasicAuthPlugin, so that no uncontrolled browser prompt
is shown.

More details in issue and PR. I would appreciate feedback and reviews.

Best,
Christos

Re: SOLR-17930: Improving MultiAuthPlugin in Solr 10

Posted by Christos Malliaridis <c....@gmail.com>.
Thanks Eric for the review on this issue.

I have finalized the changes and plan to merge them in the next days if
there are no objections.

Feel free to let me know if you have any questions or concerns. If you plan
to review the changes I can wait before merging them.

By merging the changes we can proceed and apply some fixes for the new UI
(see https://github.com/apache/solr/pull/3704) and implement the next
authentication methods.

---
Christos

On Fri, 26 Sep 2025, 14:57 Christos Malliaridis, <c....@gmail.com>
wrote:

> Hello everyone,
>
> While working on the new UI and fixing some issues in the web-target, I
> noticed some "limitations" of the MultiAuthPlugin for web clients that I
> would like to change in Solr 10.
>
> SOLR-17930 <https://issues.apache.org/jira/browse/SOLR-17930> describes
> the issue in detail, and PR #3703
> <https://github.com/apache/solr/pull/3703> contains the improvement
> proposed. It should have a small impact for existing consumers. With the
> fix the new UI (and other web-clients) are capable of displaying multiple
> authentication options simultaneously when MultiAuthPlugin is used (once
> implemented), and also support xBasic in MultiAuthPlugin for
> BasicAuthPlugin, so that no uncontrolled browser prompt is shown.
>
> More details in issue and PR. I would appreciate feedback and reviews.
>
> Best,
> Christos
>