Uploaded image for project: 'Solr'
  1. Solr
  2. SOLR-14196

AdminUI login not working for JWTAuth when blockUnknown=false

    XMLWordPrintableJSON

    Details

    • Type: Bug
    • Status: Closed
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: 8.1, 8.2, 8.3, 8.4, 8.4.1
    • Fix Version/s: 8.5
    • Component/s: Admin UI
    • Labels:
      None

      Description

      When blockUnknown=false it is not the AuthenticationPlugin that sends the HTTP response header WWW-Authenticate, but it is done by HttpSolrCall based on a 401 response from AuthorizationPlugin.

      Admin UI uses info from WWW-Authenticate header to choose what login screen to display, and for JWT it also requires an X-Solr-Authinfo header generated by the JWT plugin.

      Solution

      The BasicAuth plugin solves this by storing the map of headers to set as an attribute on ServletReuest with key AuthenticationPlugin, if we fall through to Authorization plugin. We can do that as well with JWT plugin.

        Attachments

          Issue Links

            Activity

              People

              • Assignee:
                janhoy Jan Høydahl
                Reporter:
                janhoy Jan Høydahl
              • Votes:
                0 Vote for this issue
                Watchers:
                3 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved:

                  Time Tracking

                  Estimated:
                  Original Estimate - Not Specified
                  Not Specified
                  Remaining:
                  Remaining Estimate - 0h
                  0h
                  Logged:
                  Time Spent - 50m
                  50m