Jan Høydahl created SOLR-18215:
----------------------------------
Summary: Change default of blockUnknown to true for jwt-auth
Key: SOLR-18215
URL: https://issues.apache.org/jira/browse/SOLR-18215
Project: Solr
Issue Type: Improvement
Components: security
Reporter: Jan Høydahl
Assignee: Jan Høydahl
The 'blockUnknown' flag for jwt-auth module has been 'false' all the time. But
by mistake the ref-guide was changed to describe the default as true since 9.0,
without the code change.
In the spirit of 'least surprise' we'll now change the default to 'true' from
10.1.
Note that there are still many use cases that require a setting of 'false'
coupled with configuration of an Authorization Plugin, which will now require
an explicit configuration action from the user.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
