Skip to content

Kibana Cors origin issue  #17574

@nimmanapallivenu

Description

@nimmanapallivenu

Kibana version: 6.2.3

Elasticsearch version: 6.2.3

Server OS version:Windows

Browser version: Chrom, any broweser

Browser OS version: Windows 7 or any OS

Original install method (e.g. download page, yum, from source, etc.): Download Page

Description of the problem including expected versus actual behavior: kiban api calls is not allowing in cors origin AJAX requests.

Steps to reproduce:

  1. enabled cors origin in kibana.yml
    server.cors : true
    server.cors.origin: ['*']
  2. Angular 4 ui project trying to access login api http://172.24.150.53:5601/api/security/v1/login
    3.it's making Option method call and returning 200 with below response
    {"message":"CORS error: Some headers are not allowed"}

Errors in browser console (if relevant):
{"message":"CORS error: Some headers are not allowed"}
Provide logs and/or server output (if relevant):

Describe the feature:
i need to load kibana application in iframe my one of angular 4 project. Could you please help to how i can access kibana in iframe with silent authentication like using api to get token .

Metadata

Metadata

Assignees

No one assigned

    Labels

    Team:CorePlatform Core services: plugins, logging, config, saved objects, http, ES client, i18n, etc t//

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions