Return non-200 HTTP status code when admin panel is disabled

Prerequisites

• I have searched the existing Closed AND Open Issues AND Discussions
• I have searched and read the documentation

Vaultwarden Support String

When the admin panel is disabled because the ADMIN_TOKEN is not configured, navigating to the /admin path returns a plain text message:

The admin panel is disabled, please configure the 'ADMIN_TOKEN' variable to enable it

While this is useful for a human, this response currently returns an HTTP status code of 200 OK. Thus, monitoring tools are misled by the actual status.

The admin_disabled route in src/api/admin.rs should be updated to return a 503 NOT IMPLEMENTED. A 403 could work as well but this is not an issue from the client if the admin is disabled.

Vaultwarden Build Version

v1.37.0

Deployment method

Official Container Image

Custom deployment method

No response

Reverse Proxy

traefik

Host/Server Operating System

Linux

Operating System Version

No response

Clients

Web Vault

Client Version

No response

Steps To Reproduce

➜  ~ curl -I https://OBFUSCATED/admin
HTTP/2 200
[...]

Expected Result

➜  ~ curl -I https://OBFUSCATED/admin
HTTP/2 503
[...]

Actual Result

➜  ~ curl -I https://OBFUSCATED/admin
HTTP/2 200
[...]

Logs

Screenshots or Videos

No response

Additional Context

No response