[SOLR-15296] Provide allowlisting mechanism in the auth plugin to ignore paths like login

• Type: Wish
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Component/s: Authorization, Plugin system
• Assignee: Eric Pugh
• Reporter: Zhenxu Ke
• Created: 26/Mar/21 12:38
• Updated: 25/Aug/21 14:50

Description

I'm recently working (with epugh ) on YASA to make it work under the auth plugins.
 
I saw in the codes that the authenticator allowlists the Admin login path `/solr/` explicitly, while for YASA, its path must start with `/v2` , not matching the whitelisted paths and will be intercepted, hence the login page won't be reached and redirected, I also didn't find a allowlisting mechanism in the JWT auth plugin, and RBAP doesn't seem to fit this case either. So I'm wondering if it's possible to provide allowlisting mechanism in the JWT auth plugin, so that users can configure the login paths for plugins like YASA to work?
 

Issue Links

• is duplicated by: SOLR-15295 Provide allowlisting mechanism in the JWT auth plugin to ignore paths like login