# Basic auth header kibana not working

**URL:** <https://discuss.elastic.co/t/basic-auth-header-kibana-not-working/282910>\
**Category:** Kibana\
**Tags:** elastic-stack-security\
**Created:** [August 31, 2021, 11:30am UTC](https://discuss.elastic.co/t/basic-auth-header-kibana-not-working/282910 "2021-08-31T11:30:56Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![sam3546](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/sam3546/32/79281_2.png) [@sam3546](https://discuss.elastic.co/u/sam3546)\
**Post date:** [August 31, 2021, 11:30am UTC](https://discuss.elastic.co/t/basic-auth-header-kibana-not-working/282910/1 "2021-08-31T11:30:56Z")

</div>

I have everything enabled that i can find, which by the way is very difficult to find what i need at times with the elastic docs.

I want to pass the `Authorization:` header with base64 encoded correct credentials for `username:password`.

I have trace logs set for most realms and when setting that as a header and accessing the page nothing comes through any logs to even show its being rejected.

I have set

```auto
xpack.security.authc.http.schemes: [apikey, basic]

```

Any ideas?

---

<div class="post-metadata">

**Author:** ![lukas](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/lukas/32/6812_2.png) [@lukas](https://discuss.elastic.co/u/lukas)\
**Post date:** [August 31, 2021, 6:35pm UTC](https://discuss.elastic.co/t/basic-auth-header-kibana-not-working/282910/2 "2021-08-31T18:35:48Z")

</div>

What is the response you're receiving when you send your requests?

---

<div class="post-metadata">

**Author:** ![sam3546](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/sam3546/32/79281_2.png) [@sam3546](https://discuss.elastic.co/u/sam3546)\
**Post date:** [September 1, 2021, 8:51am UTC](https://discuss.elastic.co/t/basic-auth-header-kibana-not-working/282910/3 "2021-09-01T08:51:55Z")

</div>

No response, im setting the header as a chrome extension to test but get no rejection. No acknowledgement.

---

<div class="post-metadata">

**Author:** ![sam3546](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/sam3546/32/79281_2.png) [@sam3546](https://discuss.elastic.co/u/sam3546)\
**Post date:** [September 22, 2021, 7:52am UTC](https://discuss.elastic.co/t/basic-auth-header-kibana-not-working/282910/4 "2021-09-22T07:52:51Z")

</div>

Have not tested or confirmed but i have found this in the kibana config which i believe might be causing the issue

`elasticsearch.requestHeadersWhitelist: [authorization]`

This was commented out, I will test and respond if it works.

Cheers

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [October 20, 2021, 7:53am UTC](https://discuss.elastic.co/t/basic-auth-header-kibana-not-working/282910/5 "2021-10-20T07:53:10Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.