This plugin provides an extension of ElasticSearchs HTTP Transport module to enable HTTP Basic authorization.
Download the current version from https://github.com/Asquera/elasticsearch-http-basic/downloads and copy it to plugins/http-basic.
The plugin is disabled by default. Enabling basic authorization will disable the default HTTP Transport module.
http.basic.enabled = true
http.basic.user = "my_username"
http.basic.password = "my_password"
Be aware that the password is stored in plain text.
$ curl -v --user my_username:my_password localhost:9200 # works
$ curl -v --user my_username:password localhost:9200 # sends 403
This will not send WWW-Authorize headers - this is due to elasticsearch not allowing to add custom headers to responses.
Please file your issue here: https://github.com/Asquera/elasticsearch-http-basic/issues