In your security.json, add a JWK matching your signing algorithm, using the “jwk” JSON key.
Example: “jwk” : { "kty" : "oct", "kid" : "0afee142-a0af-4410-abcc-9f2d44ff45b5", "alg" : "HS256", "k" : "FdFYFzERwC2uCBB46pZQi4GG85LujR8obt-KWRBICVQ" } Of course you need to find a way to encode your particular secret in jwk format, there should be plenty of tools available for that. If you intend to use symmetric key in prod you have to configure solr so that security.json is not readable for anyone but the admin! Jan Høydahl > 9. sep. 2019 kl. 05:46 skrev Tyrone <tyrone....@gmail.com>: > > HS256