Hi,
I have a Basic Authentication API, like:
http://username:password@hostname.com/example
Can I use this type of authentication in Open Distro Security configuration file?
I’ve tested your scenario and found that ODFE will redirect you to login page anyway.
It seems to be not supported.
What is your use case?
I’m interested on something like it, as I was using ReadOnlyREST with Elasticsearch for Fulltextsearch at Nextcloud.
I wonder if OpenSearch can be managed like that, as the FTS_Files uses:
http://user:password@localhost:9200/
Cheers! 
As long as you use it as an api - this works no problem.
Kibana still redirects to the login page, but it works for requests just fine.