727d86614e
P0 (7): Auth-bypass removed, migrations fixed, plugin-upload disabled, RLS FORCE+WITH CHECK, plugin double-registration fixed, persistent volume, domain removed P1 (11): User/tenant model, Redis centralized, worker separated, transactional outbox, XSS fixed, DMS chunked streaming, permissions unified, password reset, metrics secured, config/docs fixed, cross-tenant FK P2 (4): Contact model normalized, cross-imports reduced 94%, commands+state machines for contacts/dms/mail/calendar, SPA path-traversal 8 new migrations, 99 unit tests, 13 commands, 8 contracts, 72 files changed
30 lines
757 B
Python
30 lines
757 B
Python
"""Prometheus metrics endpoint — admin-only."""
|
|
|
|
from __future__ import annotations
|
|
|
|
from fastapi import APIRouter, Depends
|
|
from fastapi.responses import PlainTextResponse
|
|
|
|
from app.core.monitoring import generate_metrics
|
|
from app.deps import require_admin
|
|
|
|
router = APIRouter(tags=["metrics"])
|
|
|
|
|
|
@router.get(
|
|
"/api/v1/metrics",
|
|
response_class=PlainTextResponse,
|
|
dependencies=[Depends(require_admin)],
|
|
)
|
|
async def metrics():
|
|
"""Prometheus metrics endpoint.
|
|
|
|
Returns Prometheus-formatted text/plain metrics.
|
|
Requires admin role — 403 for non-admin users.
|
|
"""
|
|
data = generate_metrics()
|
|
return PlainTextResponse(
|
|
content=data.decode("utf-8"),
|
|
media_type="text/plain; version=0.0.4; charset=utf-8",
|
|
)
|