authentik/passbook/root/monitoring.py

"""Metrics view"""
from base64 import b64encode

from django.conf import settings
from django.http import Http404, HttpRequest, HttpResponse
from django.views import View
from django_prometheus.exports import ExportToDjangoView


class MetricsView(View):
    """Wrapper around ExportToDjangoView, using http-basic auth"""

    def get(self, request: HttpRequest) -> HttpResponse:
        """Check for HTTP-Basic auth"""
        auth_header = request.META.get("HTTP_AUTHORIZATION", "")
        token_type, _, credentials = auth_header.partition(" ")
        creds = f"monitor:{settings.SECRET_KEY}"
        expected = b64encode(str.encode(creds)).decode()

        if token_type != "Basic" or credentials != expected:
            raise Http404

        return ExportToDjangoView(request)