Saved objects api authentication

Security
#1

Hi everyone,

I am working at fetching saved objects from an external app. This raises two issues:

  1. With kibana without opendistro, the full url looks like this:
    http://localhost:5601/api/saved_objects/_find?type=visualization
    Is it the same with opendistro?
  2. Which authentication modes are available to do that? Is basic authentication available for internal users? Is api token authentication available as it is the case with kibana + x-pack ? Has anyone managed to do that with any authentication mode?

Best regards,

Nicholson