From 414df473f9c6a942afd1e254e2d5350cbf3c1ae4 Mon Sep 17 00:00:00 2001
From: Anbraten <anton@ju60.de>
Date: Fri, 23 Dec 2022 18:13:00 +0100
Subject: [PATCH] Disable metrics access if no token is set (#1470)

backport of #1469
---
 server/api/metrics/prometheus.go | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/server/api/metrics/prometheus.go b/server/api/metrics/prometheus.go
index 1658ea083..2d93bbc87 100644
--- a/server/api/metrics/prometheus.go
+++ b/server/api/metrics/prometheus.go
@@ -17,6 +17,7 @@ package metrics
 import (
 	"errors"
 	"fmt"
+	"net/http"
 
 	"github.com/gin-gonic/gin"
 	"github.com/prometheus/client_golang/prometheus/promhttp"
@@ -35,7 +36,7 @@ func PromHandler() gin.HandlerFunc {
 		token := server.Config.Prometheus.AuthToken
 
 		if token == "" {
-			handler.ServeHTTP(c.Writer, c.Request)
+			c.AbortWithStatus(http.StatusNotFound)
 			return
 		}