Saved objects api authentication

Security
#1

Hi everyone,

I am working at fetching saved objects from an external app. This raises two issues:

  1. With kibana without opendistro, the full url looks like this:
    http://localhost:5601/api/saved_objects/_find?type=visualization
    Is it the same with opendistro?
  2. Which authentication modes are available to do that? Is basic authentication available for internal users? Is api token authentication available as it is the case with kibana + x-pack ? Has anyone managed to do that with any authentication mode?

Best regards,

Nicholson

#2

Hi @nicholson

  1. Yes that API is still working with ODFE kibana. I tested on 1.12
  2. It worked with basic authentication. No token required as basic is internal authentication.

i.e.
curl -XGET --user admin:admin http://localhost:5601/api/saved_objects/_find?type=visualization

#3

Thanks a lot for your reply.

Nicholson