Rest authentication code

[mohankumaru]

I want to know which folder has the code for rest authentication.

[sscarduzio]

that's super vague, what do you want to do?

[mohankumaru]

Basically i have to configure oauth authentication for elasticsearch without using any plugins(including xpack) and reverse proxies, so i was looking for some references. Do you have any idea how to go about it. I have to add authentication to rest requests, so should i modify restcontroller.java.

[sscarduzio]

i have to configure oauth authentication for elasticsearch without using any plugins and reverse proxies

So you are going to fork and patch Elasticsearch code?

[mohankumaru]

yes

[sscarduzio]

I'm sure you have good reasons, but as I can't imagine them, II have a few objections:

• Why Oauth for a machine2machine interface?
• Why not a plugin? The plugin API changes more slowly than any internal API. When a new version comes out you will have hard time porting your code.
• Why not installing ReadonlyREST and be done with it? It's free and open source.
• If you really plan to patch ES, why you asked here and not in Elastic's forum?

[mohankumaru]

Nobody seems to answer my question there,so out of desperation i asked here.

[sscarduzio]

I guess they've been forked enough this year, lol.

[sscarduzio]

No but seriously I suggest you use the plugin API, as they also do internally for features that go in the main distribution. See:

https://github.com/elastic/elasticsearch/tree/master/plugins