Hi,
In the case of the plugin for JIRA / Confluence / Bamboo (like with the plugin for Jenkins), the authentication to access the monitoring page is coupled with the native authentication of JIRA / Confluence / Bamboo.
So if you want to use Prometheus, you need to disable the native authentication to the monitoring page by adding the system property in JIRA: -Djavamelody.plugin-authentication-disabled=true
then it is recommended to add another way to restrict the access to the monitoring page, for example with basic auth by adding the system property in JIRA like: -Djavamelody.authorized-users=user1:pwd1
bye,
Emeric