[SOLR-14196] AdminUI login not working for JWTAuth when blockUnknown=false

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 8.1, 8.2, 8.3, 8.4, 8.4.1
• Fix Version/s: 8.5
• Component/s: Admin UI
• Assignee: Jan Høydahl
• Reporter: Jan Høydahl
• Created: 21/Jan/20 12:32
• Updated: 24/Mar/20 12:45
• Resolved: 23/Jan/20 13:55

Description

When blockUnknown=false it is not the AuthenticationPlugin that sends the HTTP response header WWW-Authenticate, but it is done by HttpSolrCall based on a 401 response from AuthorizationPlugin.

Admin UI uses info from WWW-Authenticate header to choose what login screen to display, and for JWT it also requires an X-Solr-Authinfo header generated by the JWT plugin.

Solution

The BasicAuth plugin solves this by storing the map of headers to set as an attribute on ServletReuest with key AuthenticationPlugin, if we fall through to Authorization plugin. We can do that as well with JWT plugin.

Issue Links

• links to: GitHub Pull Request #1190