I'm currently evaluating Elasticsearch Cloud and am prototyping access from Ionic/Angular clients.
My understanding is that the new JavaScript client is solely for node.js and no longer supports browser access. Is this correct?
Is there an alternative library that supports browser access or shouldn't I even be considering this due to security concerns? Is a lightweight proxy a better approach or perhaps a Logstash endpoint supporting HTTP input (but I guess security concerns there too)?
This is working with App Search which is working on top of elasticsearch. So if you are after the "search" use case, I'd recommend using the App Search service instead of the Elasticsearch service.
But in case it does not fit your use case, here are some other answers:
My understanding is that the new JavaScript client is solely for node.js
There is no official support for the browser environment. It exposes your Elasticsearch instance to everyone, which could lead to security issues. We recommend that you write a lightweight proxy that uses this client instead.
So to this question:
shouldn't I even be considering this due to security concerns?
That makes a lot of sense not to expose elasticsearch directly IMHO.
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant
logo are trademarks of the
Apache Software Foundation
in the United States and/or other countries.