Solr: configure basic authentication

[WalterMoar]

Task (Use for Work not Directly related to a Story but supports the Sprint Goals)

Detailed Description

The Solr instances need to be secured so that only authorized users have access. Although it would be ideal to have this done using Keycloak, that is not straightforward. In the interim we will use basic authentication, which is much more easily configured.

The NAMEX API, Solr feeder, and Admin App will all need to be updated to provide credentials on their calls to the Solr API. This will be tracked with other tickets.

Use the following for the security.json file:

{
    "authentication":
    {
        "blockUnknown": true,
        "class": "solr.BasicAuthPlugin",
        "credentials":
        {
            "feeder": "[HASHES]",
            "namex_api": "[HASHES]",
            "solr_adm": "[HASHES]"
        }
    },
    "authorization":
    {
        "class": "solr.RuleBasedAuthorizationPlugin",
        "permissions":
        [
            {
                "name": "all",
                "role": "admin"
            },
            {
                "name": "read",
                "role": "api-read"
            },
            {
                "name": "TBD",
                "role": "core-reload"
            }
        ],
        "user-role":
        {
            "feeder": "core-reload",
            "namex_api": "api-read",
            "solr_adm": "admin",
        }
    }
}

Sprint Goal

Acceptance Criteria

Solr cannot be accessed unless credentials are supplied.
Documentation is updated.

Definition of Done (:one:-Mandatory to add to the Backlog, :two:-Mandatory to add to the Sprint Backlog)

• Acceptance Criteria Defined 1️⃣
• Estimate 2️⃣
• Priority Label 1️⃣
• Task Label 1️⃣
• Assignee 2️⃣
• Sprint Goal (in line with the goal of the sprint) 2️⃣

---

---