How AI is applied across API Evangelist and APIs.io. Read my AI disclosure →
API Evangelist API Evangelist
Discovery
Learnings
Guidance
Toolbox
Alignment
API Evangelist LLC

JWT Authentication: blockUnknown default allows unauthenticated access contrary to documentation

calendar_today May 19, 2026 person domain apache-solr

Security notice describing a default configuration issue in Solr’s JWT authentication plugin where blockUnknown does not behave as documented, potentially allowing unauthenticated access.

open_in_new Read original post