Bigdesk authentication

[kabudu]

I was wondering, is there a way to apply some sort of authentication mechanism for accessing the bigdesk interface? Currently, anyone who knows the address will be able to access it.

Thanks

[lukas-vlcek]

Hi,

Bigdesk itself does not have any authentication. But you can put proxy between Bigdesk and Elasticsearch. For example I use it like that - i.e. there is a proxy with authentication before Elasticsearch cluster and every time I try to access this specific Elasticsearch cluster from Bigdesk I have to pass the authentication.

I do not think it makes a lot of sense to implement authentication in Bigdesk itself as long as Elasticsearch REST API does not require authentication.

Lukas

[hmalphettes]

Hi there,

You can also use the http-basic-auth plugin:
https://github.com/Asquera/elasticsearch-http-basic
It will guard the entire elasticsearch including bigdesk and the other site plugins.

On a PaaS like cloudfoundry or heroku where I can't setup a classic proxy here the setup I am using:

• Elasticsearch+http-basic-auth with bigdesk and other plugins
• A nodejs app protected by google-oauth hat does the reverse proxy to Elasticsearch and insert the basic-auth credentials:
  https://github.com/hmalphettes/kibana-proxy

I hope this helps.

Hugues

[lukas-vlcek]

I am archiving this repository now. Thanks for contributions.