From 4e6ae373b6abc7ef0d5fb810385d14250757f3f1 Mon Sep 17 00:00:00 2001
From: TheSiahxyz <164138827+TheSiahxyz@users.noreply.github.com>
Date: Wed, 1 Apr 2026 17:22:44 +0900
Subject: feat(security): add bearer token auth for health/metrics endpoints

---
 services/data-collector/src/data_collector/main.py       | 2 +-
 services/order-executor/src/order_executor/main.py       | 2 +-
 services/portfolio-manager/src/portfolio_manager/main.py | 2 +-
 services/strategy-engine/src/strategy_engine/main.py     | 2 +-
 4 files changed, 4 insertions(+), 4 deletions(-)

(limited to 'services')

diff --git a/services/data-collector/src/data_collector/main.py b/services/data-collector/src/data_collector/main.py
index 170e8b1..81e13df 100644
--- a/services/data-collector/src/data_collector/main.py
+++ b/services/data-collector/src/data_collector/main.py
@@ -49,7 +49,7 @@ async def run() -> None:
         on_candle=on_candle,
     )
 
-    health = HealthCheckServer("data-collector", port=config.health_port)
+    health = HealthCheckServer("data-collector", port=config.health_port, auth_token=config.metrics_auth_token)
     health.register_check("redis", broker.ping)
     await health.start()
     metrics.service_up.labels(service="data-collector").set(1)
diff --git a/services/order-executor/src/order_executor/main.py b/services/order-executor/src/order_executor/main.py
index ab6ef4f..0198f65 100644
--- a/services/order-executor/src/order_executor/main.py
+++ b/services/order-executor/src/order_executor/main.py
@@ -57,7 +57,7 @@ async def run() -> None:
     last_id = "$"
     stream = "signals"
 
-    health = HealthCheckServer("order-executor", port=config.health_port + 2)
+    health = HealthCheckServer("order-executor", port=config.health_port + 2, auth_token=config.metrics_auth_token)
     health.register_check("redis", broker.ping)
     await health.start()
     metrics.service_up.labels(service="order-executor").set(1)
diff --git a/services/portfolio-manager/src/portfolio_manager/main.py b/services/portfolio-manager/src/portfolio_manager/main.py
index 02df5d2..be29a2f 100644
--- a/services/portfolio-manager/src/portfolio_manager/main.py
+++ b/services/portfolio-manager/src/portfolio_manager/main.py
@@ -63,7 +63,7 @@ async def run() -> None:
     broker = RedisBroker(config.redis_url)
     tracker = PortfolioTracker()
 
-    health = HealthCheckServer("portfolio-manager", port=config.health_port + 3)
+    health = HealthCheckServer("portfolio-manager", port=config.health_port + 3, auth_token=config.metrics_auth_token)
     health.register_check("redis", broker.ping)
     await health.start()
     metrics.service_up.labels(service="portfolio-manager").set(1)
diff --git a/services/strategy-engine/src/strategy_engine/main.py b/services/strategy-engine/src/strategy_engine/main.py
index 53681d1..fabd755 100644
--- a/services/strategy-engine/src/strategy_engine/main.py
+++ b/services/strategy-engine/src/strategy_engine/main.py
@@ -43,7 +43,7 @@ async def run() -> None:
 
     engine = StrategyEngine(broker=broker, strategies=strategies)
 
-    health = HealthCheckServer("strategy-engine", port=config.health_port + 1)
+    health = HealthCheckServer("strategy-engine", port=config.health_port + 1, auth_token=config.metrics_auth_token)
     health.register_check("redis", broker.ping)
     await health.start()
     metrics.service_up.labels(service="strategy-engine").set(1)
-- 
cgit v1.2.3