[ 
https://issues.apache.org/jira/browse/SOLR-8429?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Noble Paul updated SOLR-8429:
-----------------------------
    Description: 
If authentication is setup with BasicAuthPlugin, it let's all requests go 
through if no credentials are passed. This was done to have minimal impact for 
users who only wishes to protect a couple of end points (say , collection admin 
and core admin)

We can add a flag to {{BasicAuthPlugin}} to allow only authenticated requests 
to go in 

  was:
If authentication is setup with BasicAuthPlugin, it let's all requests go 
through if no credentials are passed. This was done to enable people to have 
minimal impact for users who only wishes to protect a couple of end points (say 
, collection admin and core admin)

We can add a flag to {{BasicAuthPlugin}} to allow only authenticated requests 
to go in 


> add a flag blockUnauthenticated to BasicAutPlugin
> -------------------------------------------------
>
>                 Key: SOLR-8429
>                 URL: https://issues.apache.org/jira/browse/SOLR-8429
>             Project: Solr
>          Issue Type: Improvement
>            Reporter: Noble Paul
>            Assignee: Noble Paul
>
> If authentication is setup with BasicAuthPlugin, it let's all requests go 
> through if no credentials are passed. This was done to have minimal impact 
> for users who only wishes to protect a couple of end points (say , collection 
> admin and core admin)
> We can add a flag to {{BasicAuthPlugin}} to allow only authenticated requests 
> to go in 



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to