Authentication for Bigdesk about bigdesk

[lukas-vlcek]

Hi,
not sure I fully understand which use cases you mean. Do you think you can provide more details about your setup?

Do you mean that you install Elasticsearch behind authenticated proxy and you run Bigdesk locally and want to connect to this ES instance? If yes, then most of the browsers should ask for credentials (given the proxy returns correct HTTP response codes like 401 or 407), you can also provide username and password as a part of URL connection string:

https://username:password@es_host:port

(always make sure you use https)

If you mean that you want to give access to Bigdesk to authenticated users only then you have to setup this on your side. But this might be tricky because Bigdesk users standard ES REST API so if you want to restrict access to Bigdesk you should also restrict access to ES instance Bigdesk is connecting to. Otherwise users can bypass Bigdesk and make direct requests to ES.

[JohnSundarraj]

@lukas-vlcek Firstly, I'm trying to host bigdesk in our local infrastructure. Then I want to connect to my proxy endpoint, but right now thats not password secured, its blocked by firewall, meaning our app can only talk to the endpoint, not from outside.

Now I'm planning to put authentication on my proxy and make connection from bigdesk. I'll restrict bigdesk access out of LAN. I think this setup should be secure. Let me know your thoughts. Thanks.

[lukas-vlcek]

I often use Bigdesk in scenario where I make connections like: Bigdesk => Proxy => ES. And it works fine, if the proxy requires authentication, no problem, most of the browsers will ask for credentials. But generally speaking Bigdesk does not have any special features addressing user roles or advanced authentication requirements.

Also keep in mind that Bigdesk can put some load on ES, the more data it pulls from ES the more resources it can require. With growing cluster size (ie. more nodes) there is more data that is send from ES to Bigdesk. So having multiple client (each with his own instance of Bigdesk) connecting to the same ES cluster can go with some cost.

Anyway, closing the ticket for now. Feel free to reopen if you have further questions.
Thanks.

[JohnSundarraj]

ok Thanks.