Restrict observability endpoints to ops admins

2026-06-13 02:35:30 +08:00
parent be1d93fc09
commit 9d120d7215
6 changed files with 75 additions and 25 deletions
@@ -36,7 +36,6 @@ function isPublicApi(pathname: string) {
    pathname === "/api/cities" ||
    pathname === "/api/payments/config" ||
    pathname === "/api/scan/terminal" ||
-    pathname === "/api/system/status" ||
    pathname === "/api/vitals" ||
    /^\/api\/city\/[^/]+$/i.test(pathname) ||
    /^\/api\/city\/[^/]+\/summary$/i.test(pathname) ||