Skip to content

refactor(security): move security configs to dedicated package#56

Open
adityamparikh wants to merge 5 commits intoapache:mainfrom
adityamparikh:security-refactor
Open

refactor(security): move security configs to dedicated package#56
adityamparikh wants to merge 5 commits intoapache:mainfrom
adityamparikh:security-refactor

Conversation

@adityamparikh
Copy link
Contributor

@adityamparikh adityamparikh commented Mar 6, 2026

Summary

  • Rename McpServerConfiguration to HttpSecurityConfiguration for clarity
  • Move security classes from config to dedicated org.apache.solr.mcp.server.security package
  • Breaking: Rename property spring.security.enabled to http.security.enabled (env var SECURITY_ENABLEDHTTP_SECURITY_ENABLED)
  • Update keycloak.md documentation to reflect new property names

Changed files

  • HttpSecurityConfiguration.java — renamed from McpServerConfiguration, moved to security package
  • MethodSecurityConfiguration.java — moved to security package, updated property reference
  • application-http.properties — property rename
  • keycloak.md — updated property references

Test plan

  • ./gradlew build passes
  • Security enabled/disabled behavior unchanged with new property name

🤖 Generated with Claude Code

adityamparikh and others added 5 commits March 5, 2026 19:43
Rename McpServerConfiguration to HttpSecurityConfiguration and move both
HttpSecurityConfiguration and MethodSecurityConfiguration from
org.apache.solr.mcp.server.config to org.apache.solr.mcp.server.security.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Signed-off-by: adityamparikh <aditya.m.parikh@gmail.com>
- Rename configuration property from `spring.security.enabled` to
  `http.security.enabled` to avoid collision with Spring Boot's own
  `spring.security.*` namespace
- Rename corresponding environment variable from `SECURITY_ENABLED`
  to `HTTP_SECURITY_ENABLED` for consistency
- Update application-http.properties, HttpSecurityConfiguration,
  MethodSecurityConfiguration, and keycloak.md

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Signed-off-by: adityamparikh <aditya.m.parikh@gmail.com>
Consolidate security-related documentation into a dedicated
security-docs directory for better organization.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Signed-off-by: adityamparikh <aditya.m.parikh@gmail.com>
Signed-off-by: Aditya Parikh <aditya.m.parikh@gmail.com>

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Signed-off-by: adityamparikh <aditya.m.parikh@gmail.com>
Merges upstream observability additions (OpenTelemetry, tracing config)
from apache#41 with security-refactor's property rename
(spring.security.enabled → http.security.enabled).

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Signed-off-by: adityamparikh <aditya.m.parikh@gmail.com>
@epugh
Copy link
Contributor

epugh commented Mar 9, 2026

I've tested with the default path of security NOT enabled, and able to make a connection.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants