Hm … JWT and Kibana should work, we have that covered in our integration tests. There’s no need to install the Search Guard Kibana plugin for it to work.
Seems like an issue with Kibana itself. If direct access to ES with a JWT token as URL param works, then Kibana does not seem to forward the query string to Elasticsearch.
Could you please open an issue on GitHub so we can investigate further:
Thanks!
···
On Tuesday, May 16, 2017 at 5:44:04 PM UTC+2, michal@hull.io wrote:
Hey,
we are trying to setup an “automatic” kibana authorization using JWT passed via url param.
We already set the
jwt_auth_domainon the elastic search withjwt_url_parameterwhich works perfectly fine when trying to call the ES.
But it doesn’t work while trying to pass the same param to the kibana - it always leads to the login page.
I found a topic about the JWT header authorization:
but for our use case the url param is a key feature here.
We have briefly reviewed the code of the https://github.com/floragunncom/search-guard-kibana-plugin/ and didn’t find anything related to the JWT.
Is there any chance to get that working? How can we achieve that?
Thanks,
Michal