[SOLR-14056] Solr admin api's are not authenticated after enabling blockUnknown parameter in jwt authentication.

• Type: Bug
• Status: Resolved
• Priority: Critical
• Resolution: Invalid
• Affects Version/s: 8.1.1
• Component/s: Authentication, Authorization
• Labels: beginner

Environment

solr stand

• Assignee: Unassigned
• Reporter: Lakhan Gupta
• Created: 11/Dec/19 15:48
• Updated: 21/Jan/20 16:59
• Resolved: 11/Dec/19 19:18

Description

Hi, 

I am enabling jwt authentication using solr 8.1.1 in standalone mode. below is my security.json file. 

{{  "authentication":{ "blockUnknown": true,    "class":"solr.JWTAuthPlugin", "jwk":{      "kty":"oct",      "use":"sig",      "kid":"k1",      "k":"8347834radajklajdlkajskdjaskldjkasljdklasjdklaskdjaslkdjklasjdlkasjkldaskldjlkasdasjdlkasjdlkdsl",      "alg":"HS256"},    "aud":"solr"},  "authorization":{      "class":"solr.RuleBasedAuthorizationPlugin",      "permissions":[  {            "name":"all", "path":"/*",            "role":"admin"         }      ],      "user-role":{         "solr":"admin"      }   }}

as you can see in above code, blockunknown parameter is enabled because of that my solr admin/info/system api is not authenticated. 

I've read in 8.1.1 documentation as blockunknown parameter block unknown request. so that, my admin/info/system api causing problem. I need an urgent help! 

 

Really appreciate if someone can give me a quick solution.

 

Thanks 

Laksh Gupta