es-sql-site-standalone not working

[SubiRUN]

$http.post($scope.url + "_sql", query)
There is no listener on "mydomain:8080/_sql".
If I modify url to "mydomain:9200/_sql", cross-origin ajax issue will happen.

[SubiRUN]

How about the following solutions?

solution 1
es-sql project:
Add Access-Control-Allow-Origin response header in class org.elasticsearch.plugin.nlpcn.RestSqlAction

es-sql-site project:
Config username, password, ip, port of ES in local storage
Add Authorization header and modify request url

solution 2
es-sql project don't need to change
es-sql-site project:
Add a config file including username, password, ip, port of ES
Use backend code to send request to ES.

[shi-yuan]

enable cors and set http.cors.allow-origin

[SubiRUN]

@shi-yuan then es-sql project don't have to change in solution 1

[SubiRUN]

I have implemented solution 2 in java

[SubiRUN]

@shi-yuan this issue still exist. es-sql-site-standalone in this repo is still not working because of authorization problems. My workaround solution may cause security issues if this site deployed on unprotected environment.

[shi-yuan]

In my opinion, it's right to enable cors on elasticsearch.yml

[SubiRUN]

es-sql-site-standalone is still not working even if cors enabled on elasticsearch.yml. Standalone means to deploy on a different ip:port, so the "Authorization" request header needs to be passed to ES. The value of "Authorization" request header is "Basic base64(username:password)", so es-sql-site-standalone need to know username, password, ip, port of ES
@shi-yuan

[shi-yuan]

It is a good idea

[shi-yuan]

Http request add header:

{
    headers: {
        "Authorization": "Basic " + window.btoa(username + ":" + password)
    }
}

[shi-yuan]

Thanks, I'll add it soon.

[SubiRUN]

thx, fixed in 5d19ee3

[SubiRUN]

to use site on es 5.x,
enable cors and visit "mydomain:8080?username=xxx&password=xxx&base_uri=encodedURI" to config es settings