func (bs *BossSearch) signQuery(url string, values *url.Values) { cred := oauth.Credentials{} cred.Token = bs.Token cred.Secret = bs.Secret client := oauth.Client{} client.SignatureMethod = oauth.HMACSHA1 client.Credentials = cred client.SignForm(nil, "GET", url, *values) }
func (h *authHandler) ServeHTTP(w http.ResponseWriter, r *http.Request) { var cred oauth.Credentials if err := getCookie(r, "auth", &cred); err != nil { if err != http.ErrNoCookie { http.Error(w, "Error reading auth cookie, "+err.Error(), 500) return } cred.Token = "" } var pcred *oauth.Credentials if cred.Token != "" && cred.Secret != "" { pcred = &cred } if pcred == nil && !h.optional { http.Error(w, "Not logged in.", 403) return } h.handler(w, r, pcred) }