[jira] [Updated] (SOLR-8951) Allow pluggable Authentication Providers in BasicAuthPlugin

["Jan Høydahl (JIRA)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/SOLR-8951?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Jan Høydahl updated SOLR-8951:
------------------------------
    Attachment: SOLR-8951.patch

Attaching first rough patch
* Allows for an attribute {{provider}} to plug in custom AuthenticationProvider
* Added MockAuthenticationProvider for tests
* BasicAuthPlugin is now ResourceLoaderAware
* {{provider}} is now a valid property for the {{set-property}} API. It must contain a JSON object with mandatory property "class"
* Fallback to Sha256AuthProv as before

Wrt. editing API, have not tested changing provider using set-property, but it should work. Perhaps it is better to introduce a new command {{set-provider}} for this?

> Allow pluggable Authentication Providers in BasicAuthPlugin
> -----------------------------------------------------------
>
>                 Key: SOLR-8951
>                 URL: https://issues.apache.org/jira/browse/SOLR-8951
>             Project: Solr
>          Issue Type: New Feature
>          Components: security
>            Reporter: Jan Høydahl
>         Attachments: SOLR-8951.patch
>
>
> Currently {{Sha256AuthenticationProvider}} is hardcoded in BasicAuthPlugin. Allow user to specify a new parameter {{authenticationProvider}} in {{security.json}} which determines the authentication provider with . Example:
> {code}
> "authentication":{
>    "blockUnknown": true,
>    "class":"solr.BasicAuthPlugin",
>    "authenticationProvider":{
>         "class":"my.custom.AuthenticationProvider",
>         "param":"value"
>     }
> }
> {code}
> We would still default to {{Sha256AuthenticationProvider}}



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@lucene.apache.org
For additional commands, e-mail: dev-help@lucene.apache.org