Merge pull request #8955 from ieQu1/prom-4-3-disable

fix(prometheus): Disable auth for prometheus endpoint

CHANGES-4.3.md

@@ -26,6 +26,7 @@ File format:
   should return false if match it to a topic.
 - Added a test to prevent a last will testament message to be
   published when a client is denied connection. [#8894](https://github.com/emqx/emqx/pull/8894)
+- Disable authorization for `api/v4/emqx_prometheus` endpoint. [8955](https://github.com/emqx/emqx/pull/8955)
 
 ## v4.3.19
 

lib-ce/emqx_dashboard/src/emqx_dashboard.erl

@@ -109,6 +109,8 @@ http_handlers() ->
 is_authorized(Req) ->
     is_authorized(binary_to_list(cowboy_req:path(Req)), Req).
 
+is_authorized("/api/v4/emqx_prometheus", _Req) ->
+    true;
 is_authorized("/api/v4/auth", _Req) ->
     true;
 is_authorized(_Path, Req) ->