[jira] [Resolved] (SOLR-13649) BasicAuth's 'blockUnknown' param should default to true

["Shalin Shekhar Mangar (Jira)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/SOLR-13649?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Shalin Shekhar Mangar resolved SOLR-13649.
------------------------------------------
    Resolution: Fixed

Thanks Marcus and Jan for all the work!

> BasicAuth's 'blockUnknown' param should default to true
> -------------------------------------------------------
>
>                 Key: SOLR-13649
>                 URL: https://issues.apache.org/jira/browse/SOLR-13649
>             Project: Solr
>          Issue Type: Improvement
>          Components: Admin UI, Authentication, security
>    Affects Versions: 7.7.2, 8.1.1
>         Environment: All
>            Reporter: Marcus Eagan
>            Assignee: Shalin Shekhar Mangar
>            Priority: Major
>              Labels: Authentication
>             Fix For: master (9.0)
>
>          Time Spent: 9h 10m
>  Remaining Estimate: 0h
>
> If someone seeks to enable basic authentication but they do not specify the {{blockUnknown}} parameter, the default value is {{false}}. That default behavior is a bit counterintuitive because if someone wishes to enable basic authentication, you would expect that they would want all unknown users to need to authenticate by default. I can imagine cases where you would not, but those cases would be less frequent.



--
This message was sent by Atlassian Jira
(v8.3.2#803003)

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@lucene.apache.org
For additional commands, e-mail: dev-help@lucene.apache.org