deploy_docus

var GitHubLoginRequired martini.Handler = func() martini.Handler {
	failedLogin := func(req *http.Request, writer http.ResponseWriter, s sessions.Session) {
		s.Delete("oauth2_token")
		s.Delete("isAllowed")
		next := url.QueryEscape(req.URL.RequestURI())
		http.Redirect(writer, req, oauth2.PathLogin+"?next="+next, 302)
	}

	return func(s sessions.Session, token oauth2.Tokens, c martini.Context, writer http.ResponseWriter, req *http.Request, rend render.Render) {
		isAllowed := s.Get("isAllowed")

		if token == nil || token.IsExpired() {
			failedLogin(req, writer, s)
		} else if isAllowed != true {
			hub := BuildGitHub()
			client := hub.GetClient(token.Access())
			user, _, _ := client.Users.Get("")

			if user == nil {
				failedLogin(req, writer, s)
			} else if int64(*user.ID) == hub.OauthAllowedId {
				s.Set("isAllowed", true)
			} else {
				orgs, _, _ := client.Organizations.List("", &github.ListOptions{})
				for _, org := range orgs {
					if int64(*org.ID) == hub.OauthAllowedId {
						return
					}
				}

				rend.HTML(401, "not_allowed", nil)
			}
		}
	}
}()