🐞 [BUG] - Metrics Basic Auth

[kutovoys]

Integrity requirements

• I provided the complete config and logs, rather than just providing the truncated parts based on my own judgment.
• I searched issues and did not find any similar issues.
• The problem can be successfully reproduced in the latest release

Description

When accessing metrics via /api/metrics endpoint, instead of prompting for Basic Auth credentials, the server returns a 401 Unauthorized error in JSON format:

{
    "message": "Unauthorized",
    "statusCode": 401
}

Current behavior:

• Direct browser access to /api/metrics returns 401 JSON response
• No Basic Auth prompt appears in browser
• Browser doesn't show authentication dialog

Expected behavior:

• Browser should prompt for Basic Auth credentials
• After successful authentication, metrics should be accessible

Environment:

• Custom metrics credentials are configured in .env:

  ### PROMETHEUS ###
  METRICS_USER=xxx
  METRICS_PASS=xxxxxxx
  

Additional information:

• The endpoint works correctly when accessed via Postman with Basic Auth credentials
• The issue appears to be with how the authentication challenge is handled in the browser context

Reproduction Method

1. Configure custom metrics credentials in .env file
2. Start the application
3. Try to access /api/metrics endpoint directly in browser
4. Observe 401 JSON response instead of Basic Auth prompt
5. Verify that the same endpoint works with Basic Auth in Postman

[kastov]

Fixed in 0.4.26.