Hitting Security API Endpoint

[tylersmalley]

I am not sure how else you could accomplish this other than using a proxy at this time until we have anonymous access.

Auto-authenticating to iframe-embedded Kibana dashboard

You can pass the Authorization header as Joe suggests using an nginx proxy. Here is the relevant section of my nginx.conf: server { listen 4443 ssl; # the default was port 443 server_name tim-virtual-machine.local; ssl_certificate /home/tim/domain.crt; ssl_certificate_key /home/tim/domain.key; ssl_session_cache shared:SSL:1m; ssl_session_timeout 5m; ssl_ciphers HIGH:!aNULL:!MD5; ssl_prefer_server_ciphers on; location / { …

You mentioned that is not possible in this scenario. Why is that? You should be able to inject a different authorization header based on the path or some factor to account for these different instances.