in src/main/java/com/googlesource/gerrit/plugins/javamelody/GerritMonitoringFilter.java [214:218]
private boolean canMonitorFromPrometheusUsingBearerToken(HttpServletRequest httpRequest) {
return httpRequest
.getHeader(AUTHORIZATION_HEADER)
.equals("Bearer " + cfg.getString(PROMETHEUS_BEARER_TOKEN));
}