Elasticsearch Guardian. A tiny reverse proxy that can offer authentication (using HTTP Basic Auth) as well as authorization.