patrick/OpenDTU-old
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Fix: Deny passwordless access to prometheus API if readonly access is disabled

Browse Source 
Fix #1358
This commit is contained in:
Thomas Basler 2023-09-19 18:59:20 +02:00
parent d419fd4794
commit f8cba5721e
1 changed files with 4 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
src/WebApi_prometheus.cpp
View File

@ -25,6 +25,10 @@ void WebApiPrometheusClass::loop()
void WebApiPrometheusClass::onPrometheusMetricsGet(AsyncWebServerRequest* request) void WebApiPrometheusClass::onPrometheusMetricsGet(AsyncWebServerRequest* request)
{ {
if (!WebApi.checkCredentialsReadonly(request)) {
return;
}
try { try {
auto stream = request->beginResponseStream("text/plain; charset=utf-8", 40960); auto stream = request->beginResponseStream("text/plain; charset=utf-8", 40960);