Alex Deparvu created SOLR-16955:
-----------------------------------

             Summary: Tracing v2 apis breaks SecurityConfHandler
                 Key: SOLR-16955
                 URL: https://issues.apache.org/jira/browse/SOLR-16955
             Project: Solr
          Issue Type: Bug
      Security Level: Public (Default Security Level. Issues are Public)
            Reporter: Alex Deparvu


Tracing for v2 apis will eagerly consume the contentstream to find a good name 
for the span. the assumption here is that the operations are cached so the 
stream ca be consumed early, but that is not the case for the 
SecurityConfHandler and possibly other parts of the code.

With tracing enabled you cannot add a user, a role, etc.

{noformat}
2023-08-29 19:13:57.591 INFO  (qtp605101809-21) 
[t:750564258779a1605867f784ee33f78a] o.a.s.s.HttpSolrCall [admin] webapp=null 
path=/cluster/security/authorization params={wt=json&_=1693361587976} status=0 
QTime=0
2023-08-29 19:13:57.613 ERROR (qtp605101809-27) 
[t:b3ab14d057a292fb71ac727c5d871156] o.a.s.h.RequestHandlerBase Server 
exception => java.lang.RuntimeException: The JSON must be an Object of the form 
{"command": {...},...
        at 
org.apache.solr.common.util.CommandOperation.parse(CommandOperation.java:275)
java.lang.RuntimeException: The JSON must be an Object of the form {"command": 
{...},...
        at 
org.apache.solr.common.util.CommandOperation.parse(CommandOperation.java:275) 
~[?:?]
        at 
org.apache.solr.common.util.CommandOperation.readCommands(CommandOperation.java:354)
 ~[?:?]
        at 
org.apache.solr.common.util.CommandOperation.readCommands(CommandOperation.java:327)
 ~[?:?]
        at 
org.apache.solr.handler.admin.SecurityConfHandler.doEdit(SecurityConfHandler.java:116)
 ~[?:?]
        at 
org.apache.solr.handler.admin.SecurityConfHandler.handleRequestBody(SecurityConfHandler.java:89)
 ~[?:?]
        at 
org.apache.solr.handler.RequestHandlerBase.handleRequest(RequestHandlerBase.java:224)
 ~[?:?]
        at org.apache.solr.api.ApiBag$ReqHandlerToApi.call(ApiBag.java:362) 
~[?:?]
        at org.apache.solr.api.V2HttpCall.handleAdmin(V2HttpCall.java:438) 
~[?:?]
        at 
org.apache.solr.servlet.HttpSolrCall.handleAdminRequest(HttpSolrCall.java:870) 
~[?:?]
        at org.apache.solr.servlet.HttpSolrCall.call(HttpSolrCall.java:539) 
~[?:?]
        at 
org.apache.solr.servlet.SolrDispatchFilter.dispatch(SolrDispatchFilter.java:248)
 ~[?:?]
        at 
org.apache.solr.servlet.SolrDispatchFilter.lambda$doFilter$0(SolrDispatchFilter.java:215)
 ~[?:?]
        at 
org.apache.solr.servlet.ServletUtils.traceHttpRequestExecution2(ServletUtils.java:241)
 ~[?:?]
        at 
org.apache.solr.servlet.ServletUtils.rateLimitRequest(ServletUtils.java:211) 
~[?:?]
        at 
org.apache.solr.servlet.SolrDispatchFilter.doFilter(SolrDispatchFilter.java:209)
 ~[?:?]
        at 
org.apache.solr.servlet.SolrDispatchFilter.doFilter(SolrDispatchFilter.java:192)
 ~[?:?]
{noformat}




--
This message was sent by Atlassian Jira
(v8.20.10#820010)

---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscr...@solr.apache.org
For additional commands, e-mail: issues-h...@solr.apache.org

Reply via email to