# Is it possible to auth kibana with kibana-plugin?

**URL:** <https://discuss.elastic.co/t/is-it-possible-to-auth-kibana-with-kibana-plugin/116678>\
**Category:** Kibana\
**Created:** [January 23, 2018, 1:36pm UTC](https://discuss.elastic.co/t/is-it-possible-to-auth-kibana-with-kibana-plugin/116678 "2018-01-23T13:36:08Z")\
**Posts on this page:** 11\
**Page:** 1

<div class="post-metadata">

**Author:** ![596375269](https://avatars.discourse-cdn.com/v4/letter/5/e495f1/32.png) [@596375269](https://discuss.elastic.co/u/596375269)\
**Post date:** [January 23, 2018, 1:36pm UTC](https://discuss.elastic.co/t/is-it-possible-to-auth-kibana-with-kibana-plugin/116678/1 "2018-01-23T13:36:08Z")

</div>

is it possible to auth kibana with coding a kibana plugin?

or another way

is kibana plugin system support authentication?

thanks for your answer.

---

<div class="post-metadata">

**Author:** ![ppisljar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ppisljar/32/11588_2.png) [@ppisljar](https://discuss.elastic.co/u/ppisljar)\
**Post date:** [January 23, 2018, 1:39pm UTC](https://discuss.elastic.co/t/is-it-possible-to-auth-kibana-with-kibana-plugin/116678/2 "2018-01-23T13:39:44Z")

</div>

i don't really understand the question, but in general you can do a lot with plugins 🙂  
but just as a reminder, there is a big chance new version of kibana won't work with your plugin and you will need to constantly keep it up to date.

---

<div class="post-metadata">

**Author:** ![596375269](https://avatars.discourse-cdn.com/v4/letter/5/e495f1/32.png) [@596375269](https://discuss.elastic.co/u/596375269)\
**Post date:** [January 23, 2018, 1:51pm UTC](https://discuss.elastic.co/t/is-it-possible-to-auth-kibana-with-kibana-plugin/116678/3 "2018-01-23T13:51:58Z")

</div>

> [@596375269](#):
>
> is it possible to auth kibana with coding a kibana plugin?

hello  
thanks for your reply  
what i want is a security solution for Kibana. for example ,to auth kibana with username and password.

i suppose plugin can help me to do this.?

---

<div class="post-metadata">

**Author:** ![ppisljar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ppisljar/32/11588_2.png) [@ppisljar](https://discuss.elastic.co/u/ppisljar)\
**Post date:** [January 23, 2018, 1:56pm UTC](https://discuss.elastic.co/t/is-it-possible-to-auth-kibana-with-kibana-plugin/116678/4 "2018-01-23T13:56:17Z")

</div>

there is x-pack which has a security for elasticsearch and kibana.  
i think there are also some 3rd party plugins, so unless you really want something specially designed for your use case i would suggest you to not write your own

---

<div class="post-metadata">

**Author:** ![596375269](https://avatars.discourse-cdn.com/v4/letter/5/e495f1/32.png) [@596375269](https://discuss.elastic.co/u/596375269)\
**Post date:** [January 23, 2018, 1:58pm UTC](https://discuss.elastic.co/t/is-it-possible-to-auth-kibana-with-kibana-plugin/116678/5 "2018-01-23T13:58:44Z")

</div>

> [@ppisljar](#):
>
> i think there are also some 3rd party plugins

Can you recommend some plugin?

---

<div class="post-metadata">

**Author:** ![ppisljar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ppisljar/32/11588_2.png) [@ppisljar](https://discuss.elastic.co/u/ppisljar)\
**Post date:** [January 23, 2018, 2:00pm UTC](https://discuss.elastic.co/t/is-it-possible-to-auth-kibana-with-kibana-plugin/116678/6 "2018-01-23T14:00:25Z")

</div>

x-pack for sure, its the only one supported by elastic

---

<div class="post-metadata">

**Author:** ![596375269](https://avatars.discourse-cdn.com/v4/letter/5/e495f1/32.png) [@596375269](https://discuss.elastic.co/u/596375269)\
**Post date:** [January 23, 2018, 3:09pm UTC](https://discuss.elastic.co/t/is-it-possible-to-auth-kibana-with-kibana-plugin/116678/7 "2018-01-23T15:09:50Z")

</div>

ok,, then is it possible writing a kibana security plugin for a nodejs developer？

since i noticed kibana plugin is coded with nodejs

---

<div class="post-metadata">

**Author:** ![ppisljar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ppisljar/32/11588_2.png) [@ppisljar](https://discuss.elastic.co/u/ppisljar)\
**Post date:** [January 23, 2018, 3:16pm UTC](https://discuss.elastic.co/t/is-it-possible-to-auth-kibana-with-kibana-plugin/116678/8 "2018-01-23T15:16:01Z")

</div>

yes, kibana server side is nodejs and frontend is js (angular and react)

---

<div class="post-metadata">

**Author:** ![596375269](https://avatars.discourse-cdn.com/v4/letter/5/e495f1/32.png) [@596375269](https://discuss.elastic.co/u/596375269)\
**Post date:** [January 23, 2018, 3:33pm UTC](https://discuss.elastic.co/t/is-it-possible-to-auth-kibana-with-kibana-plugin/116678/9 "2018-01-23T15:33:46Z")

</div>

sorry ，i donot understand 'yes' in your sentence

did it point to the fact kibana is writen in nodejs？

or point to the question if one can written a security plugin ，without hacking kibana

thank you

---

<div class="post-metadata">

**Author:** ![ppisljar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ppisljar/32/11588_2.png) [@ppisljar](https://discuss.elastic.co/u/ppisljar)\
**Post date:** [January 23, 2018, 3:47pm UTC](https://discuss.elastic.co/t/is-it-possible-to-auth-kibana-with-kibana-plugin/116678/10 "2018-01-23T15:47:26Z")

</div>

it pointed toe the fact kibana is written in nodeJS, however the answer to `can one write a kibana security plugin` is yes as well 🙂

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [February 20, 2018, 3:47pm UTC](https://discuss.elastic.co/t/is-it-possible-to-auth-kibana-with-kibana-plugin/116678/11 "2018-02-20T15:47:49Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
