In our app , we were trying to use kibana with shield. We are trying to embed the dashboard in an iframe. Following is what we are doing to pass the authorization header:
On click of dashboard name in UI ,we make an ajax request to one of our controllers (Spring Rest Controller). Controller will create the Authorization header and make a request to Kibana.
Kibana returns an html page with script to execute . I tried numerous ways to load that html page to display the dashboard, it simply won't work.
May be I am doing something wrong. Is there a better way to auto authenticate kibana from iframe?
Note: If I directly provide kibana url in iframe src, it prompts for authentication and once i give the credentials it loads the dasboard. What I am trying to avoid is that prompt.