Every Opensolr Index is protected with HTTP authentication from the moment it is created. A new index gets a default username and password, and you can change both at any time.
01 · The defaults of a new index
| Field | Value |
|---|---|
| Username | opensolr |
| Password | Your master API key: Master REST API Key on your dashboard, also under Account › API Keys. |
02 · Change them
Open the index
Click the index name in Solr › Index List.
Security › Authentication
Type the new username and password and click Save. Letters and digits only: any other character is removed when you save.
Live in about 10 seconds
Then update every app, plugin and script that connects to the index. Step by step: HTTP Basic Auth for your index.
03 · When you generate a new API key
New indexes take the new key
Every index created afterwards gets the new key as its default password.
Existing indexes keep their password
Their password does not change. To update it, change it by hand in the Security tab.
04 · In a team
A team member works on the indexes shared with them, but never sees the owner's master key. On an index that still has it as password, the password is not shown to the member: they can set new credentials in the Security tab, or ask the owner.
Treat the password as one: never put it in browser JavaScript and never commit it to a repository.