package middlewareimport (	"context"	"farga/db/types"	"farga/lib"	"farga/templating"	"net/http"	"github.com/google/uuid"	"github.com/gorilla/mux")var RepoKey = "repo"// manages retrieving repo DB data + privatefunc Repo(store Store) mux.MiddlewareFunc {	return func(next http.Handler) http.Handler {		return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {			vars := mux.Vars(r)			userHandle := vars["user"]			repoName := vars["repo"]			dbRepo, err := store.RepoHandle(userHandle, repoName)			if err != nil || dbRepo.ID == uuid.Nil {				templating.Render(w, r, "base", "repo/not_found")				return			}			// verify if the user has access to the repo.			reqUser, ok := r.Context().Value(lib.UserKey).(*types.User)			if dbRepo.IsPrivate && (!ok || dbRepo.User.ID != reqUser.ID) {				templating.Render(w, r, "base", "repo/not_found")				return			}			ctx := context.WithValue(r.Context(), RepoKey, dbRepo)			r = r.WithContext(ctx)			next.ServeHTTP(w, r)		})	}}// only allows the owner of a repo through.// requires `md.Repo` and `md.GeneralAuth` middleware.func RequireRepoOwnership(store Store) mux.MiddlewareFunc {	return func(next http.Handler) http.Handler {		return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {			repo, repoOk := r.Context().Value(RepoKey).(types.Repo)			user, userOk := r.Context().Value(lib.UserKey).(*types.User)			if !repoOk || !userOk || user.ID == uuid.Nil {				templating.Render(w, r, "base", "repo/not_found")				return			}			if *repo.UserID != user.ID {				http.Redirect(w, r, "?err=Forbidden", http.StatusSeeOther)				return			}			next.ServeHTTP(w, r)		})	}}