Who can reach your index
Every Opensolr Index is private from the moment it is created. A request reaches your data only when it sends the right username and password, and comes from an address your rules allow.
Both checks run on every request to your index. A request that fails either one is refused.
Where to find it
- Open your index in the Control Panel.
- Click Security in the left menu. On a cluster, the tab is on its main index.
The tab has two parts, each explained on its own page:
- HTTP Basic Auth: the username and password every request must send.
- IP restriction: which addresses may use which part of your index.
Around your index
- Two-factor authentication protects the sign-in to your Opensolr account.
- API keys: your master key, and scoped keys that only reach the endpoints and indexes you choose.
- Teams: colleagues sign in with their own account, never with your password.
- A password on the hosted search page of a site search index.
Security pages
- Security overview
- HTTP Basic Auth
- IP restriction
- Two-factor authentication