func (bs *BossSearch) signQuery(url string, values *url.Values) {
cred := oauth.Credentials{}
cred.Token = bs.Token
cred.Secret = bs.Secret
client := oauth.Client{}
client.SignatureMethod = oauth.HMACSHA1
client.Credentials = cred
client.SignForm(nil, "GET", url, *values)
}
func (h *authHandler) ServeHTTP(w http.ResponseWriter, r *http.Request) {
var cred oauth.Credentials
if err := getCookie(r, "auth", &cred); err != nil {
if err != http.ErrNoCookie {
http.Error(w, "Error reading auth cookie, "+err.Error(), 500)
return
}
cred.Token = ""
}
var pcred *oauth.Credentials
if cred.Token != "" && cred.Secret != "" {
pcred = &cred
}
if pcred == nil && !h.optional {
http.Error(w, "Not logged in.", 403)
return
}
h.handler(w, r, pcred)
}
