[SOLR-11650] Credentials used for BasicAuth displayed in clear text on slave nodes

• Type: Bug
• Status: Open
• Priority: Critical
• Resolution: Unresolved
• Affects Version/s: 6.6.2
• Component/s: Authentication
• Assignee: Unassigned
• Reporter: Constantin Bugneac
• Created: 16/Nov/17 10:46
• Updated: 08/Jun/19 15:11

Description

Pre-requisites:

Have in place Solr configured in master slave replication with BasicAuth enabled.

Issue:

In UI on slave (under Replication tab of core) the master url is displayed with username and password used for BasicAuth in clear text.

Example:
master url:https://solr:[e-mail]:8983/solr/mycore
(see attached the screenshot)

Suggestion/Idea:

At least mask the password with *******