searchtechnologies / kibana-logbrowser

The Search Technologies Log Browser
25 stars 9 forks source link

X-Pack Authenitcation Incompatibility #7

Open wweidner opened 7 years ago

wweidner commented 7 years ago

X-Pack authentication breaks the plugin.

To start the calls to callWithInternalUser need to be replaced with callWithRequest and passed the request from the handler so that the session id is included in the request. Otherwise, the request will throw a security error trying to use the default 'kibana' user.

Example: const call = dataCluster.callWithRequest; ... handler(req, reply) { ... call(req, 'search', config).then(function (resp) { ... }); }

This will get the 'Choose Files to Browse' functioning but I've been unable to get any results from 'Browse Selected Files' as yet. I suspect it's still a security issue as the request header on calls to '/api/log_browser/ browsePages' doesn't appear to contain the cookie and sid but I haven't been able to track down exactly why that is as yet.