github/zot
1
0
Fork 0
mirror of https://github.com/project-zot/zot.git synced 2026-06-17 21:17:58 +08:00
Code Issues Packages Projects Releases Wiki Activity

Fix metrics authorization middleware bleed (#3183)

Browse Source 
fix: metrics authorization middleware bleed (#3182)

Fixes `extension_metrics_disabled.go` to correctly isolate the authz
middleware when the metrics extension is disabled.

Signed-off-by: Matthieu Mottet <m.mottet@outlook.com>
This commit is contained in:
mottetm
2025-06-06 00:41:32 +02:00
committed by GitHub
parent 0c51cb72c3
commit 483c869920
3 changed files with 16 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
pkg/extensions/extension_metrics_disabled.go
+4 -3
View File
@@ -29,7 +29,8 @@ func SetupMetricsRoutes(conf *config.Config, router *mux.Router,
zcommon.WriteJSON(w, http.StatusOK, m)
}
router.Use(authnFunc)
router.Use(authzFunc)
router.HandleFunc("/metrics", getMetrics).Methods("GET")
extRouter := router.PathPrefix("/metrics").Subrouter()
extRouter.Use(authnFunc)
extRouter.Use(authzFunc)
extRouter.Methods("GET").Handler(http.HandlerFunc(getMetrics))
}