logstash-input-http icon indicating copy to clipboard operation
logstash-input-http copied to clipboard

Support OAuth-Based Authentication

Open chitralverma opened this issue 9 months ago • 0 comments

Summary

The logstash-input-http plugin currently supports Basic Authentication for securing webhook-based event ingestion. However, many modern services require OAuth-based authentication for secure and scalable access control. This feature request proposes adding OAuth 2.0 support for webhook sources in the plugin.

Motivation

  • Many external data sources (e.g., cloud services, APIs) require OAuth 2.0 instead of Basic Authentication.
  • OAuth provides better security and granular access control through token-based authentication.
  • Enables compatibility with enterprise-grade APIs that enforce OAuth authentication.

Proposed Solution

  • Implement OAuth 2.0 bearer token authentication for incoming HTTP requests.
  • Allow users to configure OAuth tokens via Logstash input plugin settings.
  • Optionally support JWT validation for more advanced use cases.

chitralverma avatar Mar 07 '25 11:03 chitralverma