Disable AllowAnonymousStreamAccess and AllowAnonymousEndpointAccess by default (DB-276)

docs/security.md

@@ -79,29 +79,29 @@ Due to security reasons the DefaultAdminPassword and DefaultOpsPassword options
 
 Historically, anonymous users with network access have been allowed to read/write streams that do not have access control lists.
 
-This anonymous access to streams can be disabled, and in the future will likely be disabled by default.
+This is now disabled by default but can be enabled with this setting.
 
 | Format               | Syntax                                     |
 |:---------------------|:-------------------------------------------|
 | Command line         | `--allow-anonymous-stream-access`          |
 | YAML                 | `AllowAnonymousStreamAccess`               |
 | Environment variable | `EVENTSTORE_ALLOW_ANONYMOUS_STREAM_ACCESS` |
 
-**Default**: `true`
+**Default**: `false`
 
 Similarly to streams above, anonymous access has historically been available to the `/stats` and `/gossip` endpoints, and the `HTTP OPTIONS` method.
 
-This can be disabled with the following option. Anonymous access will still be granted to `/ping`, `/info`, the static content of the UI, and http redirects
+This is now disabled by default but can be enabled with this setting.
 
-For this to work, you can disable the `AllowAnonymousEndpointAccess` option:
+Anonymous access is still always granted to `/ping`, `/info`, the static content of the UI, and http redirects.
 
 | Format               | Syntax                                       |
 |:---------------------|:---------------------------------------------|
 | Command line         | `--allow-anonymous-endpoint-access`          |
 | YAML                 | `AllowAnonymousEndpointAccess`               |
 | Environment variable | `EVENTSTORE_ALLOW_ANONYMOUS_ENDPOINT_ACCESS` |
 
-**Default**: `true`
+**Default**: `false`
 
 ### Certificates configuration
 

src/EventStore.Core.Tests/Helpers/MiniClusterNode.cs

@@ -95,6 +95,8 @@ public class MiniClusterNode<TLogFormat, TStreamId> {
 
 			var options = new ClusterVNodeOptions {
 				Application = new() {
+					AllowAnonymousEndpointAccess = true,
+					AllowAnonymousStreamAccess = true,
 					Insecure = !useHttps,
 					WorkerThreads = 1,
 					StatsPeriodSec = (int)TimeSpan.FromHours(1).TotalSeconds

src/EventStore.Core.Tests/Helpers/MiniNode.cs

@@ -95,6 +95,8 @@ public class MiniNode<TLogFormat, TStreamId> : MiniNode {
 			var options = new ClusterVNodeOptions {
 					IndexBitnessVersion = indexBitnessVersion,
 					Application = new() {
+						AllowAnonymousEndpointAccess = true,
+						AllowAnonymousStreamAccess = true,
 						StatsPeriodSec = 60 * 60,
 						WorkerThreads = 1
 					},

src/EventStore.Core/ClusterVNodeOptions.cs

@@ -165,10 +165,10 @@ public record ApplicationOptions {
 			public bool Insecure { get; init; } = false;
 
 			[Description("Allow anonymous access to HTTP API endpoints.")]
-			public bool AllowAnonymousEndpointAccess { get; init; } = true;
+			public bool AllowAnonymousEndpointAccess { get; init; } = false;
 
 			[Description("Allow anonymous access to streams.")]
-			public bool AllowAnonymousStreamAccess { get; init; } = true;
+			public bool AllowAnonymousStreamAccess { get; init; } = false;
 
 			internal static ApplicationOptions FromConfiguration(IConfigurationRoot configurationRoot) => new() {
 				Config = configurationRoot.GetValue<string>(nameof(Config)),