mirror of
				https://gitcode.com/gitea/gitea.git
				synced 2025-10-25 12:26:40 +08:00 
			
		
		
		
	 e81ccc406b
			
		
	
	e81ccc406b
	
	
	
		
			
			Change all license headers to comply with REUSE specification. Fix #16132 Co-authored-by: flynnnnnnnnnn <flynnnnnnnnnn@github> Co-authored-by: John Olheiser <john.olheiser@gmail.com>
		
			
				
	
	
		
			34 lines
		
	
	
		
			802 B
		
	
	
	
		
			Go
		
	
	
	
	
	
			
		
		
	
	
			34 lines
		
	
	
		
			802 B
		
	
	
	
		
			Go
		
	
	
	
	
	
| // Copyright 2018 The Gitea Authors. All rights reserved.
 | |
| // SPDX-License-Identifier: MIT
 | |
| 
 | |
| package web
 | |
| 
 | |
| import (
 | |
| 	"crypto/subtle"
 | |
| 	"net/http"
 | |
| 
 | |
| 	"code.gitea.io/gitea/modules/setting"
 | |
| 
 | |
| 	"github.com/prometheus/client_golang/prometheus/promhttp"
 | |
| )
 | |
| 
 | |
| // Metrics validate auth token and render prometheus metrics
 | |
| func Metrics(resp http.ResponseWriter, req *http.Request) {
 | |
| 	if setting.Metrics.Token == "" {
 | |
| 		promhttp.Handler().ServeHTTP(resp, req)
 | |
| 		return
 | |
| 	}
 | |
| 	header := req.Header.Get("Authorization")
 | |
| 	if header == "" {
 | |
| 		http.Error(resp, "", http.StatusUnauthorized)
 | |
| 		return
 | |
| 	}
 | |
| 	got := []byte(header)
 | |
| 	want := []byte("Bearer " + setting.Metrics.Token)
 | |
| 	if subtle.ConstantTimeCompare(got, want) != 1 {
 | |
| 		http.Error(resp, "", http.StatusUnauthorized)
 | |
| 		return
 | |
| 	}
 | |
| 	promhttp.Handler().ServeHTTP(resp, req)
 | |
| }
 |