From 39cd24bd091dd97a4b7ab321a8a6c59e836611bb Mon Sep 17 00:00:00 2001
From: Drew DeVault <sir@cmpwn.com>
Date: Wed, 21 Jul 2021 09:36:26 +0200
Subject: [PATCH] auth: allow /query/metrics w/o authentication

---
 auth/middleware.go | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/auth/middleware.go b/auth/middleware.go
index 89a25ed129b4679a888e528c32b7d1f5d893f4c4..b04d0a548bdbef21f94820a5c46f31b91033e2a3 100644
--- a/auth/middleware.go
+++ b/auth/middleware.go
@@ -688,7 +688,8 @@ func Middleware(conf ini.File, apiconf string) func(http.Handler) http.Handler {
 
 	return func(next http.Handler) http.Handler {
 		return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
-			if !strings.HasPrefix(r.URL.Path, "/query") {
+			if !strings.HasPrefix(r.URL.Path, "/query") ||
+				r.URL.Path == "/query/metrics" {
 				next.ServeHTTP(w, r)
 				return
 			}