(ranger) branch master updated: RANGER-5384: basic-auth header should not be set in Solr requests when username or password is empty (#715)

[ma...@apache.org]

This is an automated email from the ASF dual-hosted git repository.

madhan pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/ranger.git


The following commit(s) were added to refs/heads/master by this push:
     new 48b45bf9b RANGER-5384: basic-auth header should not be set in Solr requests when username or password is empty (#715)
48b45bf9b is described below

commit 48b45bf9bbb464474d9c772b5f91093b9d851c54
Author: Madhan Neethiraj <ma...@apache.org>
AuthorDate: Thu Oct 23 21:00:25 2025 -0700

    RANGER-5384: basic-auth header should not be set in Solr requests when username or password is empty (#715)
---
 security-admin/src/main/java/org/apache/ranger/solr/SolrUtil.java | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/security-admin/src/main/java/org/apache/ranger/solr/SolrUtil.java b/security-admin/src/main/java/org/apache/ranger/solr/SolrUtil.java
index 714fa2cc4..f8fd850c9 100644
--- a/security-admin/src/main/java/org/apache/ranger/solr/SolrUtil.java
+++ b/security-admin/src/main/java/org/apache/ranger/solr/SolrUtil.java
@@ -19,6 +19,7 @@
 
 package org.apache.ranger.solr;
 
+import org.apache.commons.lang3.StringUtils;
 import org.apache.ranger.common.MessageEnums;
 import org.apache.ranger.common.PropertiesUtil;
 import org.apache.ranger.common.RESTErrorUtil;
@@ -81,7 +82,7 @@ public QueryResponse runQuery(SolrClient solrClient, SolrQuery solrQuery) throws
                 String       username = PropertiesUtil.getProperty("ranger.solr.audit.user");
                 String       password = PropertiesUtil.getProperty("ranger.solr.audit.user.password");
 
-                if (username != null && password != null) {
+                if (StringUtils.isNotBlank(username) && StringUtils.isNotBlank(password)) {
                     req.setBasicAuthCredentials(username, password);
                 }