Auth kibana through jwt

jsanz · October 24, 2023, 2:14pm

There is no support for JWT and seems that it will never be available for end users but there's a request logged for API access

github.com/elastic/kibana

Support authenticating to Kibana APIs via JWT

opened 03:43PM - 17 Aug 23 UTC

legrego

Team:Security enhancement Feature:Security/Authentication

Elasticsearch has support for authenticating using JSON Web Tokens via their [JW…T Realm](https://www.elastic.co/guide/en/elasticsearch/reference/current/jwt-auth-realm.html). While we can't support end-users logging in to Kibana via JWT, we should consider adding support for authenticating API requests. At the moment, we have at least 1 known issue, and that is with the Alerting APIs: Alerting relies on the "Grant API Key API" to create API Keys on behalf of the rule creator, and this API does not support the JWT credential type. ```[tasklist] ### Tasks - [ ] Research other Kibana features that may be problematic for JWT credentials - [ ] Document any found limitations - [ ] Create instructions on how users should authenticate via JWT to Kibana APIs - [ ] Create automated test suites to verify JWT authentication continues to function ```

Please, feel free to chime in on that issue to provide any feedback you see fit.

Topic		Replies	Views
XPACK Custom Realm with SSO integration Elasticsearch	2	1594	December 22, 2017
Kibana 8.6.1 keeps Loading Elastic forever when using a JWT token Elasticsearch elastic-stack-security	12	1184	March 22, 2023
Login in Kibana using Custom Realm installed in Elasticsearch Kibana	7	2263	September 13, 2017
Authenticating Kibana Requests at Elastic Search Elasticsearch	2	624	July 5, 2017
Custom Security Extension and Realm Work for Kibana Login Kibana	4	490	March 10, 2020

Auth kibana through jwt

Related topics