[SOLR-13649] BasicAuth's 'blockUnknown' param should default to true

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 7.7.2, 8.1.1
• Fix Version/s: 9.0
• Component/s: Admin UI, Authentication, security
• Labels: Authentication

Environment

All

• Assignee: Shalin Shekhar Mangar
• Reporter: Marcus Eagan
• Created: 23/Jul/19 22:49
• Updated: 12/May/22 00:26
• Resolved: 29/Aug/19 05:30

Description

If someone seeks to enable basic authentication but they do not specify the blockUnknown parameter, the default value is false. That default behavior is a bit counterintuitive because if someone wishes to enable basic authentication, you would expect that they would want all unknown users to need to authenticate by default. I can imagine cases where you would not, but those cases would be less frequent.

Issue Links

• links to: GitHub Pull Request #805