Files
leocrm/app/routes/metrics.py
T
Agent Zero 727d86614e Security fixes: P0-P2 complete (22 fixes)
P0 (7): Auth-bypass removed, migrations fixed, plugin-upload disabled, RLS FORCE+WITH CHECK, plugin double-registration fixed, persistent volume, domain removed
P1 (11): User/tenant model, Redis centralized, worker separated, transactional outbox, XSS fixed, DMS chunked streaming, permissions unified, password reset, metrics secured, config/docs fixed, cross-tenant FK
P2 (4): Contact model normalized, cross-imports reduced 94%, commands+state machines for contacts/dms/mail/calendar, SPA path-traversal

8 new migrations, 99 unit tests, 13 commands, 8 contracts, 72 files changed
2026-07-25 21:03:46 +02:00

30 lines
757 B
Python

"""Prometheus metrics endpoint — admin-only."""
from __future__ import annotations
from fastapi import APIRouter, Depends
from fastapi.responses import PlainTextResponse
from app.core.monitoring import generate_metrics
from app.deps import require_admin
router = APIRouter(tags=["metrics"])
@router.get(
"/api/v1/metrics",
response_class=PlainTextResponse,
dependencies=[Depends(require_admin)],
)
async def metrics():
"""Prometheus metrics endpoint.
Returns Prometheus-formatted text/plain metrics.
Requires admin role — 403 for non-admin users.
"""
data = generate_metrics()
return PlainTextResponse(
content=data.decode("utf-8"),
media_type="text/plain; version=0.0.4; charset=utf-8",
)