[
https://issues.apache.org/jira/browse/SOLR-18614?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18137325#comment-18137325
]
Eric Pugh edited comment on SOLR-18614 at 11/3/26, 3:49 PM:
------------------------------------------------------------
i linked as a duplicate. I'm glad to find out about this bug, elsewhere in
another PR on main branch I noticed the weird /____v2/node/health routing being
required, and I hated it.. So, I think what I am hearing is that 5214 fixes
this problem?
was (Author: epugh):
i linked as a duplicate. I'm glad to find out about this bug, elsewhere in
another PR on main branch I noticed the weird /____v2/node/health routing being
required, and I hated it.. So, I think what I am hearing is that 5214 fixes
this problem.
> Predefined "health" permission does not grant anonymous access to v2 health
> endpoint
> ------------------------------------------------------------------------------------
>
> Key: SOLR-18614
> URL: https://issues.apache.org/jira/browse/SOLR-18614
> Project: Solr
> Issue Type: Bug
> Components: Authorization
> Affects Versions: 10.1
> Reporter: Marco Remy
> Priority: Minor
> Labels: authorization, health, health-check, monitoring
>
> After upgrading from Solr 10.0.0 to 10.1.0, anonymous access to the v2 health
> endpoint stopped working even though the predefined {{health}} permission and
> {{{}authentication.blockUnknown = false{}}}.
> *Steps to reproduce:*
> * Configure BasicAuth + RuleBasedAuthorizationPlugin with:
> * {{authentication.blockUnknown = false}}
> * Predefined permission {{\{"name": "health", "role": null, "index": 11\}}}
> Call the endpoints without credentials:
> {noformat}
> GET /solr/admin/info/health → 200 (works)
> GET /api/node/health → 401
> {noformat}
> *Workaround that restores access:*
> {code:json}
> {
> "name": "health-v2",
> "role": null,
> "collection": null,
> "path": ["/____v2/node/health"],
> "method": ["GET"],
> "params":{},
> "index": 12
> }
> {code}
--
This message was sent by Atlassian Jira
(v10.3.26#10030026)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
