Description
When blockUnknown=false it is not the AuthenticationPlugin that sends the HTTP response header WWW-Authenticate, but it is done by HttpSolrCall based on a 401 response from AuthorizationPlugin.
Admin UI uses info from WWW-Authenticate header to choose what login screen to display, and for JWT it also requires an X-Solr-Authinfo header generated by the JWT plugin.
Solution
The BasicAuth plugin solves this by storing the map of headers to set as an attribute on ServletReuest with key AuthenticationPlugin, if we fall through to Authorization plugin. We can do that as well with JWT plugin.
Attachments
Issue Links
- links to