(ranger) branch ranger-2.8 updated: RANGER-5384: basic-auth header should not be set in Solr requests when username or password is empty (#715)

[madhan]

This is an automated email from the ASF dual-hosted git repository.

madhan pushed a commit to branch ranger-2.8
in repository https://gitbox.apache.org/repos/asf/ranger.git


The following commit(s) were added to refs/heads/ranger-2.8 by this push:
     new cb2d7a73c RANGER-5384: basic-auth header should not be set in Solr 
requests when username or password is empty (#715)
cb2d7a73c is described below

commit cb2d7a73cab059c3ff4cc8a3a9972f1312500bb6
Author: Madhan Neethiraj <mad...@apache.org>
AuthorDate: Thu Oct 23 21:00:25 2025 -0700

    RANGER-5384: basic-auth header should not be set in Solr requests when 
username or password is empty (#715)
    
    (cherry picked from commit 48b45bf9bbb464474d9c772b5f91093b9d851c54)
---
 security-admin/src/main/java/org/apache/ranger/solr/SolrUtil.java | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/security-admin/src/main/java/org/apache/ranger/solr/SolrUtil.java 
b/security-admin/src/main/java/org/apache/ranger/solr/SolrUtil.java
index a5823364f..1576c437e 100644
--- a/security-admin/src/main/java/org/apache/ranger/solr/SolrUtil.java
+++ b/security-admin/src/main/java/org/apache/ranger/solr/SolrUtil.java
@@ -25,6 +25,7 @@
 import java.util.List;
 import java.util.TimeZone;
 
+import org.apache.commons.lang3.StringUtils;
 import org.apache.ranger.common.MessageEnums;
 import org.apache.ranger.common.PropertiesUtil;
 import org.apache.ranger.common.RESTErrorUtil;
@@ -79,7 +80,8 @@ public QueryResponse runQuery(SolrClient solrClient, 
SolrQuery solrQuery) throws
                 QueryRequest req      = new QueryRequest(solrQuery, 
METHOD.POST);
                 String       username = 
PropertiesUtil.getProperty("ranger.solr.audit.user");
                 String       password = 
PropertiesUtil.getProperty("ranger.solr.audit.user.password");
-                if (username != null && password != null) {
+
+                if (StringUtils.isNotBlank(username) && 
StringUtils.isNotBlank(password)) {
                     req.setBasicAuthCredentials(username, password);
                 }