JWT auth with whitelisting

security.json

{
  "authentication": {
    "blockUnknown": false,
    "class": "solr.JWTAuthPlugin",
    "jwk": {
      "kty": "oct",
      "use": "sig",
      "kid": "k1",
      "k": "7A02618BE6943C22FD81CAB9F6FCF063B6E1732C3614BC3ACA6032B6B3215CAF0D28A34FD423423CA3AC34BEA27D3F79",
      "alg": "HS256"
    },
    "aud": "solr"
  },
  "authorization": {
    "class": "solr.RuleBasedAuthorizationPlugin",
    "permissions": [{
      "collection": null,
      "name": "healthcheckv2",
      "path": "/api/node/health",
      "role": null
    }, {
      "collection": null,
      "name": "healthcheckv1",
      "path": "/solr/admin/info/health",
      "role": null
    }, {
      "collection": null,
      "name": "infosystem",
      "path": "/solr/admin/info/system",
      "role": null
    }, {
      "collection": null,
      "name": "metrics",
      "path": "/admin/metrics",
      "role": null
    }, {
      "name": "security-edit",
      "role": "admin"
    }, {
      "name": "collection-admin-edit",
      "role": "admin"
    }, {
      "name": "core-admin-edit",
      "role": "admin"
    }, {
      "name": "all",
      "role": "*"
    }],
    "user-role": {
      "solr": "admin"
    }
  }
}