You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@lucene.apache.org by "Noble Paul (JIRA)" <ji...@apache.org> on 2015/12/16 21:07:46 UTC
[jira] [Updated] (SOLR-8429) add a flag blockUnauthenticated to
BasicAutPlugin
[ https://issues.apache.org/jira/browse/SOLR-8429?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Noble Paul updated SOLR-8429:
-----------------------------
Description:
If authentication is setup with BasicAuthPlugin, it let's all requests go through if no credentials are passed. This was done to have minimal impact for users who only wishes to protect a couple of end points (say , collection admin and core admin)
We can add a flag to {{BasicAuthPlugin}} to allow only authenticated requests to go in
was:
If authentication is setup with BasicAuthPlugin, it let's all requests go through if no credentials are passed. This was done to enable people to have minimal impact for users who only wishes to protect a couple of end points (say , collection admin and core admin)
We can add a flag to {{BasicAuthPlugin}} to allow only authenticated requests to go in
> add a flag blockUnauthenticated to BasicAutPlugin
> -------------------------------------------------
>
> Key: SOLR-8429
> URL: https://issues.apache.org/jira/browse/SOLR-8429
> Project: Solr
> Issue Type: Improvement
> Reporter: Noble Paul
> Assignee: Noble Paul
>
> If authentication is setup with BasicAuthPlugin, it let's all requests go through if no credentials are passed. This was done to have minimal impact for users who only wishes to protect a couple of end points (say , collection admin and core admin)
> We can add a flag to {{BasicAuthPlugin}} to allow only authenticated requests to go in
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@lucene.apache.org
For additional commands, e-mail: dev-help@lucene.apache.org