groove/Part-DB-server
1
0
Fork 0
mirror of https://github.com/Part-DB/Part-DB-server.git synced 2026-05-17 17:01:31 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

Only show version string in health endpoint, when user has permissions

Browse source
This commit is contained in:
Jan Böhmer 2026-05-03 19:43:12 +02:00
parent bd686ed9b3
commit ce267cd69d
1 changed files with 10 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

13
src/Controller/UpdateManagerController.php
View file

@ -588,9 +588,16 @@ class UpdateManagerController extends AbstractController
#[Route('/health', name: 'admin_update_manager_health', methods: ['GET'])] #[Route('/health', name: 'admin_update_manager_health', methods: ['GET'])]
public function healthCheck(): JsonResponse public function healthCheck(): JsonResponse
{ {
return $this->json([ //Only show version if user is logged in and has permission
$response = [
'status' => 'ok', 'status' => 'ok',
'version' => $this->versionManager->getVersion()->toString(), ];
]);
if ($this->isGranted('@system.show_updates')) {
$response['version'] = $this->versionManager->getVersion()->toString();
}
return $this->json($response);
} }
} }