Re: Production readiness of Solr JWT

2022-01-25 Thread S G
6:42 PM 李旭纶 wrote: > JWT Token has expire time in mind. You can decode second part (split by > dot) and get a JSON object witch has "iat" field means expire timestamp. > > > Before each request, check this time and renew it when it close. > > > On 1/24/2022 03:06,

Production readiness of Solr JWT

2022-01-23 Thread S G
Hello, Can anyone share if Solr JWT is something widely used in production or not? We were planning to use it, but have stumbled across a problem where the JWT token on the client side isn't refreshed automatically. So if that expires after 15 minutes, client side traffic would come to a stop unl

How to enforce client hostname verification when using mutual TLS in Solr?

2021-12-03 Thread S G
Hello, Does anyone know how to enforce client hostname verification when using mutual TLS in Solr? Without that feature, any host with a certificated could connect to Solr using m-TLS and there is no authentication (the primary use-case of m-TLS). Also, if Solr is secured by m-TLS, is there a way