Content inside supertokenslib<br />
(The <a href='#raw'>raw file</a> follows this syntax highlighted file.)<br /><br />
<link rel="stylesheet" href="https://unpkg.com/@highlightjs/cdn-assets@11.6.0/styles/stackoverflow-light.min.css">
<script src="https://unpkg.com/@highlightjs/cdn-assets@11.6.0/highlight.min.js"></script>
<script>hljs.highlightAll();</script>
<pre><code>package supertokenslib

import (
	&#34;bytes&#34;
	&#34;compress/gzip&#34;
	&#34;context&#34;
	_ &#34;embed&#34;
	&#34;fmt&#34;
	&#34;net/http&#34;
	&#34;os&#34;
	&#34;strings&#34;
	&#34;text/template&#34; // We don&#39;t use html/template, since all values come from the owner of the server

	&#34;crawshaw.io/sqlite/sqlitex&#34;
	&#34;github.com/supertokens/supertokens-golang/recipe/dashboard&#34;
	&#34;github.com/supertokens/supertokens-golang/recipe/emailverification&#34;
	&#34;github.com/supertokens/supertokens-golang/recipe/emailverification/evmodels&#34;
	&#34;github.com/supertokens/supertokens-golang/recipe/passwordless&#34;
	&#34;github.com/supertokens/supertokens-golang/recipe/passwordless/plessmodels&#34;
	&#34;github.com/supertokens/supertokens-golang/recipe/session&#34;
	&#34;github.com/supertokens/supertokens-golang/recipe/session/sessmodels&#34;
	&#34;github.com/supertokens/supertokens-golang/supertokens&#34;
)

func envRequire(k string) string {
	v, exists := os.LookupEnv(k)
	if !exists {
		panic(fmt.Sprintf(&#34;Required env var &#39;%s&#39; was not defined in the current environment&#34;, k))
	}
	return v
}

//go:embed index.min.js
var indexmin string

type wrappedConfig struct {
	LoggedIn  bool
	UserID    string
	UserEmail string
	Cfg       Config
}

type Config struct {
	PlainUI               bool
	ConnectionURI         string
	APIKey                string
	AppName               string
	APIDomain             string
	WebsiteDomain         string
	APIBasePath           string
	WebsiteBasePath       string
	SuperTokensWebLibBase string
	UserSignedUp          func(string, string) // userId, userEmail
	UserSignedIn          func(string, string) // userId, userEmail
}

var dbpool *sqlitex.Pool

func (c Config) Init() {
	dbName := envRequire(&#34;STDB_FILENAME&#34;)
	var err error
	dbpool, err = sqlitex.Open(&#34;file:&#34;&#43;dbName, 0, 10)
	if err != nil {
		panic(fmt.Sprintf(&#34;Unable to open given STDB_FILENAME (&#39;%s&#39;): %s&#34;, dbName, err))
	}
	conn := dbpool.Get(context.Background())
	if conn == nil {
		panic(&#34;Unable to get a connection from the dbpool&#34;)
	}
	defer dbpool.Put(conn)
	if err := sqlitex.ExecScript(conn,
		`create table if not exists user (id text primary key, email text);`); err != nil {
		panic(&#34;Unable to drop/create user table: &#34; &#43; err.Error())
	}
	cookieSecure := true
	err = supertokens.Init(supertokens.TypeInput{
		Supertokens: &amp;supertokens.ConnectionInfo{
			ConnectionURI: c.ConnectionURI,
			APIKey:        c.APIKey,
		},
		AppInfo: supertokens.AppInfo{
			AppName:         c.AppName,
			APIDomain:       c.APIDomain,
			WebsiteDomain:   c.WebsiteDomain,
			APIBasePath:     &amp;c.APIBasePath,
			WebsiteBasePath: &amp;c.WebsiteBasePath,
		},
		RecipeList: []supertokens.Recipe{
			emailverification.Init(evmodels.TypeInput{Mode: evmodels.ModeRequired}),
			passwordless.Init(plessmodels.TypeInput{
				FlowType:           &#34;USER_INPUT_CODE&#34;,
				ContactMethodEmail: plessmodels.ContactMethodEmailConfig{Enabled: true},
				Override: &amp;plessmodels.OverrideStruct{
					Functions: func(originalImplementation plessmodels.RecipeInterface) plessmodels.RecipeInterface {
						originalConsumeCode := *originalImplementation.ConsumeCode
						(*originalImplementation.ConsumeCode) = func(userInput *plessmodels.UserInputCodeWithDeviceID, linkCode *string, preAuthSessionID string, tenantId string, userContext supertokens.UserContext) (plessmodels.ConsumeCodeResponse, error) {
							response, err := originalConsumeCode(userInput, linkCode, preAuthSessionID, tenantId, userContext)
							if err != nil {
								return plessmodels.ConsumeCodeResponse{}, err
							}
							if response.OK != nil {
								user := response.OK.User
								if response.OK.CreatedNewUser {
									conn := dbpool.Get(context.Background())
									if conn == nil {
										panic(&#34;Unable to get a connection from the dbpool to add user&#34;)
									}
									defer dbpool.Put(conn)
									addUserStmt := conn.Prep(&#34;insert into user (id, email) values ($id, $email);&#34;)
									if addUserStmt.ClearBindings() != nil || addUserStmt.Reset() != nil {
										panic(&#34;Failed to clear past bindings or reset&#34;)
									}
									addUserStmt.SetText(&#34;$id&#34;, user.ID)
									addUserStmt.SetText(&#34;$email&#34;, *user.Email)
									if _, err := addUserStmt.Step(); err != nil {
										panic(&#34;failed to step stmt: &#34; &#43; err.Error())
									}
									c.UserSignedUp(user.ID, *user.Email)
								} else {
									c.UserSignedIn(user.ID, *user.Email)
								}
							}
							return response, nil
						}
						return originalImplementation
					},
				},
			}),
			session.Init(&amp;sessmodels.TypeInput{CookieSecure: &amp;cookieSecure}),
			dashboard.Init(nil),
		},
	})
	if err != nil {
		panic(&#34;Failed to init Supertokens: &#34; &#43; err.Error())
	}
}

func (c Config) GetUser(w http.ResponseWriter, r *http.Request) (userid string, userEmail string, exists bool) {
	fp := false
	opts := &amp;sessmodels.VerifySessionOptions{SessionRequired: &amp;fp}
	if sessionContainer, err := session.GetSession(r, w, opts); err == nil &amp;&amp; sessionContainer != nil {
		id := sessionContainer.GetUserID()
		conn := dbpool.Get(context.Background())
		if conn == nil {
			fmt.Println(&#34;Unable to get a connection from the dbpool to lookup user&#34;)
			return &#34;&#34;, &#34;&#34;, false
		}
		defer dbpool.Put(conn)
		getUserStmt := conn.Prep(&#34;select email from user where id = $id limit 1;&#34;)
		if getUserStmt.ClearBindings() != nil || getUserStmt.Reset() != nil {
			fmt.Println(&#34;Failed to clear past bindings or reset to lookup user&#34;)
			return &#34;&#34;, &#34;&#34;, false
		}
		fmt.Println(&#34;Looking for id:&#34;, id)
		getUserStmt.SetText(&#34;$id&#34;, id)
		if hasRow, err := getUserStmt.Step(); err != nil {
			fmt.Println(&#34;failed to step stmt to lookup user: &#34; &#43; err.Error())
			return &#34;&#34;, &#34;&#34;, false
		} else if !hasRow {
			fmt.Println(&#34;Unable to find user by id&#34;)
			return &#34;&#34;, &#34;&#34;, false
		}
		email := getUserStmt.GetText(&#34;email&#34;)
		getUserStmt.Step()
		return id, email, true
	}
	return &#34;&#34;, &#34;&#34;, false
}

func (c Config) clientSideScript(w http.ResponseWriter, r *http.Request) string {
	uid, uemail, exists := c.GetUser(w, r)
	wc := wrappedConfig{exists, uid, uemail, c}
	var b strings.Builder
	if tmpl, err := template.New(&#34;&#34;).Parse(indexmin); err != nil {
		panic(&#34;Failed to parse index template: &#34; &#43; err.Error())
	} else if err = tmpl.Execute(&amp;b, wc); err != nil {
		panic(&#34;Failed to execute index template: &#34; &#43; err.Error())
	}
	return b.String()
}

func (c Config) Middleware(next http.Handler) http.Handler {
	prefixedPath := func(s string) string { return c.APIBasePath &#43; s }
	setSVGHeaders := func(w http.ResponseWriter) {
		w.Header().Add(&#34;Content-Type&#34;, &#34;image/svg&#43;xml&#34;)
		w.Header().Set(&#34;Cache-Control&#34;, &#34;max-age=2592000&#34;)
	}
	return supertokens.Middleware(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
		w.Header().Set(&#34;Access-Control-Allow-Origin&#34;, c.WebsiteDomain)
		w.Header().Set(&#34;Access-Control-Allow-Credentials&#34;, &#34;true&#34;)
		if r.Method == &#34;OPTIONS&#34; {
			w.Header().Set(&#34;Access-Control-Allow-Headers&#34;,
				strings.Join(append([]string{&#34;Content-Type&#34;}, supertokens.GetAllCORSHeaders()...), &#34;,&#34;))
			w.Header().Set(&#34;Access-Control-Allow-Methods&#34;, &#34;*&#34;)
			w.Write([]byte(&#34;&#34;))
		} else if r.URL.Path == prefixedPath(&#34;/login.svg&#34;) {
			setSVGHeaders(w)
			fmt.Fprint(w, login)
		} else if r.URL.Path == prefixedPath(&#34;/logout.svg&#34;) {
			setSVGHeaders(w)
			fmt.Fprint(w, logout)
		} else if r.URL.Path == prefixedPath(&#34;/person_outline.svg&#34;) {
			setSVGHeaders(w)
			fmt.Fprint(w, person_outline)
		} else if r.URL.Path == prefixedPath(&#34;/client.js&#34;) {
			w.Header().Add(&#34;Content-Type&#34;, &#34;text/javascript&#34;)
			w.Header().Add(&#34;Content-Encoding&#34;, &#34;gzip&#34;)
			var buf bytes.Buffer
			zw := gzip.NewWriter(&amp;buf)
			_, err := zw.Write([]byte(c.clientSideScript(w, r))) // Can&#39;t be done with a pre-gzip/embed - template wasn&#39;t compiled before now
			if err != nil {
				w.WriteHeader(http.StatusInternalServerError)
				return
			}
			zw.Close()
			fmt.Fprint(w, buf.String())
		} else {
			next.ServeHTTP(w, r)
		}
	}))
}

const login = `&lt;svg width=&#34;32px&#34; height=&#34;32px&#34; viewBox=&#34;0.0 0.0 32.0 32.0&#34; xmlns=&#34;http://www.w3.org/2000/svg&#34;&gt;
	&lt;polyline stroke=&#34;black&#34; stroke-width=&#34;1&#34; fill=&#34;none&#34; points=&#34;9,10 19,16 9,22 &#34;&gt;&lt;/polyline&gt;
	&lt;polyline stroke=&#34;black&#34; stroke-width=&#34;1&#34; fill=&#34;none&#34; points=&#34;3,16 13,16&#34;&gt;&lt;/polyline&gt;
	&lt;rect x=&#34;9&#34; y=&#34;6&#34; width=&#34;20&#34; height=&#34;20&#34; rx=&#34;5&#34; fill=&#34;none&#34; stroke=&#34;black&#34; stroke-width=&#34;1&#34; stroke-dasharray=&#34;35px&#34; stroke-dashoffset=&#34;-5.5px&#34;&gt;&lt;/rect&gt;
&lt;/svg&gt;`
const logout = `&lt;svg width=&#34;32px&#34; height=&#34;32px&#34; viewBox=&#34;0.0 0.0 32.0 32.0&#34; xmlns=&#34;http://www.w3.org/2000/svg&#34;&gt;
	&lt;polyline stroke=&#34;black&#34; stroke-width=&#34;1&#34; fill=&#34;none&#34; points=&#34;19,10 29,16 19,22 &#34;&gt;&lt;/polyline&gt;
	&lt;polyline stroke=&#34;black&#34; stroke-width=&#34;1&#34; fill=&#34;none&#34; points=&#34;12,16 22,16 &#34;&gt;&lt;/polyline&gt;
	&lt;rect x=&#34;3&#34; y=&#34;6&#34; width=&#34;20&#34; height=&#34;20&#34; rx=&#34;5&#34; fill=&#34;none&#34; stroke=&#34;black&#34; stroke-width=&#34;1&#34; stroke-dasharray=&#34;35px&#34; stroke-dashoffset=&#34;29.5px&#34;&gt;&lt;/rect&gt;
&lt;/svg&gt;`
const person_outline = `&lt;svg version=&#34;1.1&#34; viewBox=&#34;0.0 0.0 32.0 32.0&#34; fill=&#34;none&#34; stroke=&#34;none&#34; stroke-linecap=&#34;square&#34; stroke-miterlimit=&#34;10&#34;
xmlns:xlink=&#34;http://www.w3.org/1999/xlink&#34; xmlns=&#34;http://www.w3.org/2000/svg&#34;&gt;
&lt;clipPath id=&#34;p.0&#34;&gt;&lt;path d=&#34;m0 0l32.0 0l0 32.0l-32.0 0l0 -32.0z&#34; clip-rule=&#34;nonzero&#34;/&gt;&lt;/clipPath&gt;&lt;g clip-path=&#34;url(#p.0)&#34;&gt;&lt;path fill=&#34;#000000&#34; fill-opacity=&#34;0.0&#34; d=&#34;m0 0l32.0 0l0 32.0l-32.0 0z&#34; fill-rule=&#34;evenodd&#34;/&gt;&lt;path fill=&#34;#000000&#34; fill-opacity=&#34;0.0&#34; d=&#34;m8.960629 9.800525l0 0c0 -3.8877363 3.1516342 -7.0393696 7.0393705 -7.0393696l0 0c1.8669567 0 3.6574478 0.7416458 4.9775867 2.0617836c1.320137 1.320138 2.0617828 3.1106296 2.0617828 4.9775863l0 0c0 3.8877373 -3.1516323 7.0393705 -7.0393696 7.0393705l0 0c-3.8877363 0 -7.0393705 -3.1516333 -7.0393705 -7.0393705z&#34; fill-rule=&#34;evenodd&#34;/&gt;&lt;path stroke=&#34;#000000&#34; stroke-width=&#34;1.0&#34; stroke-linejoin=&#34;round&#34; stroke-linecap=&#34;butt&#34; d=&#34;m8.960629 9.800525l0 0c0 -3.8877363 3.1516342 -7.0393696 7.0393705 -7.0393696l0 0c1.8669567 0 3.6574478 0.7416458 4.9775867 2.0617836c1.320137 1.320138 2.0617828 3.1106296 2.0617828 4.9775863l0 0c0 3.8877373 -3.1516323 7.0393705 -7.0393696 7.0393705l0 0c-3.8877363 0 -7.0393705 -3.1516333 -7.0393705 -7.0393705z&#34; fill-rule=&#34;evenodd&#34;/&gt;&lt;path fill=&#34;#000000&#34; fill-opacity=&#34;0.0&#34; d=&#34;m16.0 16.839895l0 0c3.6587353 0 7.167618 1.4534264 9.754732 4.0405426c2.5871162 2.5871162 4.0405426 6.095999 4.0405426 9.754732l-13.795275 0z&#34; fill-rule=&#34;evenodd&#34;/&gt;&lt;path fill=&#34;#000000&#34; fill-opacity=&#34;0.0&#34; d=&#34;m16.0 16.839895l0 0c3.6587353 0 7.167618 1.4534264 9.754732 4.0405426c2.5871162 2.5871162 4.0405426 6.095999 4.0405426 9.754732&#34; fill-rule=&#34;evenodd&#34;/&gt;&lt;path stroke=&#34;#000000&#34; stroke-width=&#34;1.0&#34; stroke-linejoin=&#34;round&#34; stroke-linecap=&#34;butt&#34; d=&#34;m16.0 16.839895l0 0c3.6587353 0 7.167618 1.4534264 9.754732 4.0405426c2.5871162 2.5871162 4.0405426 6.095999 4.0405426 9.754732&#34; fill-rule=&#34;evenodd&#34;/&gt;&lt;path fill=&#34;#000000&#34; fill-opacity=&#34;0.0&#34; d=&#34;m16.0 16.839895l0 0c-3.6587343 0 -7.167617 1.4534264 -9.754733 4.0405426c-2.5871158 2.5871162 -4.0405426 6.095999 -4.0405426 9.754732l13.795276 0z&#34; fill-rule=&#34;evenodd&#34;/&gt;&lt;path fill=&#34;#000000&#34; fill-opacity=&#34;0.0&#34; d=&#34;m16.0 16.839895l0 0c-3.6587343 0 -7.167617 1.4534264 -9.754733 4.0405426c-2.5871158 2.5871162 -4.0405426 6.095999 -4.0405426 9.754732&#34; fill-rule=&#34;evenodd&#34;/&gt;&lt;path stroke=&#34;#000000&#34; stroke-width=&#34;1.0&#34; stroke-linejoin=&#34;round&#34; stroke-linecap=&#34;butt&#34; d=&#34;m16.0 16.839895l0 0c-3.6587343 0 -7.167617 1.4534264 -9.754733 4.0405426c-2.5871158 2.5871162 -4.0405426 6.095999 -4.0405426 9.754732&#34; fill-rule=&#34;evenodd&#34;/&gt;&lt;/g&gt;&lt;/svg&gt;`
</code></pre>
<br /><br />
<div id='raw'>The raw file follows...</div>
<br /><br />
<div style="border:solid 1px black; padding:1em; overflow:scroll" contentEditable><pre>package supertokenslib

import (
	&#34;bytes&#34;
	&#34;compress/gzip&#34;
	&#34;context&#34;
	_ &#34;embed&#34;
	&#34;fmt&#34;
	&#34;net/http&#34;
	&#34;os&#34;
	&#34;strings&#34;
	&#34;text/template&#34; // We don&#39;t use html/template, since all values come from the owner of the server

	&#34;crawshaw.io/sqlite/sqlitex&#34;
	&#34;github.com/supertokens/supertokens-golang/recipe/dashboard&#34;
	&#34;github.com/supertokens/supertokens-golang/recipe/emailverification&#34;
	&#34;github.com/supertokens/supertokens-golang/recipe/emailverification/evmodels&#34;
	&#34;github.com/supertokens/supertokens-golang/recipe/passwordless&#34;
	&#34;github.com/supertokens/supertokens-golang/recipe/passwordless/plessmodels&#34;
	&#34;github.com/supertokens/supertokens-golang/recipe/session&#34;
	&#34;github.com/supertokens/supertokens-golang/recipe/session/sessmodels&#34;
	&#34;github.com/supertokens/supertokens-golang/supertokens&#34;
)

func envRequire(k string) string {
	v, exists := os.LookupEnv(k)
	if !exists {
		panic(fmt.Sprintf(&#34;Required env var &#39;%s&#39; was not defined in the current environment&#34;, k))
	}
	return v
}

//go:embed index.min.js
var indexmin string

type wrappedConfig struct {
	LoggedIn  bool
	UserID    string
	UserEmail string
	Cfg       Config
}

type Config struct {
	PlainUI               bool
	ConnectionURI         string
	APIKey                string
	AppName               string
	APIDomain             string
	WebsiteDomain         string
	APIBasePath           string
	WebsiteBasePath       string
	SuperTokensWebLibBase string
	UserSignedUp          func(string, string) // userId, userEmail
	UserSignedIn          func(string, string) // userId, userEmail
}

var dbpool *sqlitex.Pool

func (c Config) Init() {
	dbName := envRequire(&#34;STDB_FILENAME&#34;)
	var err error
	dbpool, err = sqlitex.Open(&#34;file:&#34;&#43;dbName, 0, 10)
	if err != nil {
		panic(fmt.Sprintf(&#34;Unable to open given STDB_FILENAME (&#39;%s&#39;): %s&#34;, dbName, err))
	}
	conn := dbpool.Get(context.Background())
	if conn == nil {
		panic(&#34;Unable to get a connection from the dbpool&#34;)
	}
	defer dbpool.Put(conn)
	if err := sqlitex.ExecScript(conn,
		`create table if not exists user (id text primary key, email text);`); err != nil {
		panic(&#34;Unable to drop/create user table: &#34; &#43; err.Error())
	}
	cookieSecure := true
	err = supertokens.Init(supertokens.TypeInput{
		Supertokens: &amp;supertokens.ConnectionInfo{
			ConnectionURI: c.ConnectionURI,
			APIKey:        c.APIKey,
		},
		AppInfo: supertokens.AppInfo{
			AppName:         c.AppName,
			APIDomain:       c.APIDomain,
			WebsiteDomain:   c.WebsiteDomain,
			APIBasePath:     &amp;c.APIBasePath,
			WebsiteBasePath: &amp;c.WebsiteBasePath,
		},
		RecipeList: []supertokens.Recipe{
			emailverification.Init(evmodels.TypeInput{Mode: evmodels.ModeRequired}),
			passwordless.Init(plessmodels.TypeInput{
				FlowType:           &#34;USER_INPUT_CODE&#34;,
				ContactMethodEmail: plessmodels.ContactMethodEmailConfig{Enabled: true},
				Override: &amp;plessmodels.OverrideStruct{
					Functions: func(originalImplementation plessmodels.RecipeInterface) plessmodels.RecipeInterface {
						originalConsumeCode := *originalImplementation.ConsumeCode
						(*originalImplementation.ConsumeCode) = func(userInput *plessmodels.UserInputCodeWithDeviceID, linkCode *string, preAuthSessionID string, tenantId string, userContext supertokens.UserContext) (plessmodels.ConsumeCodeResponse, error) {
							response, err := originalConsumeCode(userInput, linkCode, preAuthSessionID, tenantId, userContext)
							if err != nil {
								return plessmodels.ConsumeCodeResponse{}, err
							}
							if response.OK != nil {
								user := response.OK.User
								if response.OK.CreatedNewUser {
									conn := dbpool.Get(context.Background())
									if conn == nil {
										panic(&#34;Unable to get a connection from the dbpool to add user&#34;)
									}
									defer dbpool.Put(conn)
									addUserStmt := conn.Prep(&#34;insert into user (id, email) values ($id, $email);&#34;)
									if addUserStmt.ClearBindings() != nil || addUserStmt.Reset() != nil {
										panic(&#34;Failed to clear past bindings or reset&#34;)
									}
									addUserStmt.SetText(&#34;$id&#34;, user.ID)
									addUserStmt.SetText(&#34;$email&#34;, *user.Email)
									if _, err := addUserStmt.Step(); err != nil {
										panic(&#34;failed to step stmt: &#34; &#43; err.Error())
									}
									c.UserSignedUp(user.ID, *user.Email)
								} else {
									c.UserSignedIn(user.ID, *user.Email)
								}
							}
							return response, nil
						}
						return originalImplementation
					},
				},
			}),
			session.Init(&amp;sessmodels.TypeInput{CookieSecure: &amp;cookieSecure}),
			dashboard.Init(nil),
		},
	})
	if err != nil {
		panic(&#34;Failed to init Supertokens: &#34; &#43; err.Error())
	}
}

func (c Config) GetUser(w http.ResponseWriter, r *http.Request) (userid string, userEmail string, exists bool) {
	fp := false
	opts := &amp;sessmodels.VerifySessionOptions{SessionRequired: &amp;fp}
	if sessionContainer, err := session.GetSession(r, w, opts); err == nil &amp;&amp; sessionContainer != nil {
		id := sessionContainer.GetUserID()
		conn := dbpool.Get(context.Background())
		if conn == nil {
			fmt.Println(&#34;Unable to get a connection from the dbpool to lookup user&#34;)
			return &#34;&#34;, &#34;&#34;, false
		}
		defer dbpool.Put(conn)
		getUserStmt := conn.Prep(&#34;select email from user where id = $id limit 1;&#34;)
		if getUserStmt.ClearBindings() != nil || getUserStmt.Reset() != nil {
			fmt.Println(&#34;Failed to clear past bindings or reset to lookup user&#34;)
			return &#34;&#34;, &#34;&#34;, false
		}
		fmt.Println(&#34;Looking for id:&#34;, id)
		getUserStmt.SetText(&#34;$id&#34;, id)
		if hasRow, err := getUserStmt.Step(); err != nil {
			fmt.Println(&#34;failed to step stmt to lookup user: &#34; &#43; err.Error())
			return &#34;&#34;, &#34;&#34;, false
		} else if !hasRow {
			fmt.Println(&#34;Unable to find user by id&#34;)
			return &#34;&#34;, &#34;&#34;, false
		}
		email := getUserStmt.GetText(&#34;email&#34;)
		getUserStmt.Step()
		return id, email, true
	}
	return &#34;&#34;, &#34;&#34;, false
}

func (c Config) clientSideScript(w http.ResponseWriter, r *http.Request) string {
	uid, uemail, exists := c.GetUser(w, r)
	wc := wrappedConfig{exists, uid, uemail, c}
	var b strings.Builder
	if tmpl, err := template.New(&#34;&#34;).Parse(indexmin); err != nil {
		panic(&#34;Failed to parse index template: &#34; &#43; err.Error())
	} else if err = tmpl.Execute(&amp;b, wc); err != nil {
		panic(&#34;Failed to execute index template: &#34; &#43; err.Error())
	}
	return b.String()
}

func (c Config) Middleware(next http.Handler) http.Handler {
	prefixedPath := func(s string) string { return c.APIBasePath &#43; s }
	setSVGHeaders := func(w http.ResponseWriter) {
		w.Header().Add(&#34;Content-Type&#34;, &#34;image/svg&#43;xml&#34;)
		w.Header().Set(&#34;Cache-Control&#34;, &#34;max-age=2592000&#34;)
	}
	return supertokens.Middleware(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
		w.Header().Set(&#34;Access-Control-Allow-Origin&#34;, c.WebsiteDomain)
		w.Header().Set(&#34;Access-Control-Allow-Credentials&#34;, &#34;true&#34;)
		if r.Method == &#34;OPTIONS&#34; {
			w.Header().Set(&#34;Access-Control-Allow-Headers&#34;,
				strings.Join(append([]string{&#34;Content-Type&#34;}, supertokens.GetAllCORSHeaders()...), &#34;,&#34;))
			w.Header().Set(&#34;Access-Control-Allow-Methods&#34;, &#34;*&#34;)
			w.Write([]byte(&#34;&#34;))
		} else if r.URL.Path == prefixedPath(&#34;/login.svg&#34;) {
			setSVGHeaders(w)
			fmt.Fprint(w, login)
		} else if r.URL.Path == prefixedPath(&#34;/logout.svg&#34;) {
			setSVGHeaders(w)
			fmt.Fprint(w, logout)
		} else if r.URL.Path == prefixedPath(&#34;/person_outline.svg&#34;) {
			setSVGHeaders(w)
			fmt.Fprint(w, person_outline)
		} else if r.URL.Path == prefixedPath(&#34;/client.js&#34;) {
			w.Header().Add(&#34;Content-Type&#34;, &#34;text/javascript&#34;)
			w.Header().Add(&#34;Content-Encoding&#34;, &#34;gzip&#34;)
			var buf bytes.Buffer
			zw := gzip.NewWriter(&amp;buf)
			_, err := zw.Write([]byte(c.clientSideScript(w, r))) // Can&#39;t be done with a pre-gzip/embed - template wasn&#39;t compiled before now
			if err != nil {
				w.WriteHeader(http.StatusInternalServerError)
				return
			}
			zw.Close()
			fmt.Fprint(w, buf.String())
		} else {
			next.ServeHTTP(w, r)
		}
	}))
}

const login = `&lt;svg width=&#34;32px&#34; height=&#34;32px&#34; viewBox=&#34;0.0 0.0 32.0 32.0&#34; xmlns=&#34;http://www.w3.org/2000/svg&#34;&gt;
	&lt;polyline stroke=&#34;black&#34; stroke-width=&#34;1&#34; fill=&#34;none&#34; points=&#34;9,10 19,16 9,22 &#34;&gt;&lt;/polyline&gt;
	&lt;polyline stroke=&#34;black&#34; stroke-width=&#34;1&#34; fill=&#34;none&#34; points=&#34;3,16 13,16&#34;&gt;&lt;/polyline&gt;
	&lt;rect x=&#34;9&#34; y=&#34;6&#34; width=&#34;20&#34; height=&#34;20&#34; rx=&#34;5&#34; fill=&#34;none&#34; stroke=&#34;black&#34; stroke-width=&#34;1&#34; stroke-dasharray=&#34;35px&#34; stroke-dashoffset=&#34;-5.5px&#34;&gt;&lt;/rect&gt;
&lt;/svg&gt;`
const logout = `&lt;svg width=&#34;32px&#34; height=&#34;32px&#34; viewBox=&#34;0.0 0.0 32.0 32.0&#34; xmlns=&#34;http://www.w3.org/2000/svg&#34;&gt;
	&lt;polyline stroke=&#34;black&#34; stroke-width=&#34;1&#34; fill=&#34;none&#34; points=&#34;19,10 29,16 19,22 &#34;&gt;&lt;/polyline&gt;
	&lt;polyline stroke=&#34;black&#34; stroke-width=&#34;1&#34; fill=&#34;none&#34; points=&#34;12,16 22,16 &#34;&gt;&lt;/polyline&gt;
	&lt;rect x=&#34;3&#34; y=&#34;6&#34; width=&#34;20&#34; height=&#34;20&#34; rx=&#34;5&#34; fill=&#34;none&#34; stroke=&#34;black&#34; stroke-width=&#34;1&#34; stroke-dasharray=&#34;35px&#34; stroke-dashoffset=&#34;29.5px&#34;&gt;&lt;/rect&gt;
&lt;/svg&gt;`
const person_outline = `&lt;svg version=&#34;1.1&#34; viewBox=&#34;0.0 0.0 32.0 32.0&#34; fill=&#34;none&#34; stroke=&#34;none&#34; stroke-linecap=&#34;square&#34; stroke-miterlimit=&#34;10&#34;
xmlns:xlink=&#34;http://www.w3.org/1999/xlink&#34; xmlns=&#34;http://www.w3.org/2000/svg&#34;&gt;
&lt;clipPath id=&#34;p.0&#34;&gt;&lt;path d=&#34;m0 0l32.0 0l0 32.0l-32.0 0l0 -32.0z&#34; clip-rule=&#34;nonzero&#34;/&gt;&lt;/clipPath&gt;&lt;g clip-path=&#34;url(#p.0)&#34;&gt;&lt;path fill=&#34;#000000&#34; fill-opacity=&#34;0.0&#34; d=&#34;m0 0l32.0 0l0 32.0l-32.0 0z&#34; fill-rule=&#34;evenodd&#34;/&gt;&lt;path fill=&#34;#000000&#34; fill-opacity=&#34;0.0&#34; d=&#34;m8.960629 9.800525l0 0c0 -3.8877363 3.1516342 -7.0393696 7.0393705 -7.0393696l0 0c1.8669567 0 3.6574478 0.7416458 4.9775867 2.0617836c1.320137 1.320138 2.0617828 3.1106296 2.0617828 4.9775863l0 0c0 3.8877373 -3.1516323 7.0393705 -7.0393696 7.0393705l0 0c-3.8877363 0 -7.0393705 -3.1516333 -7.0393705 -7.0393705z&#34; fill-rule=&#34;evenodd&#34;/&gt;&lt;path stroke=&#34;#000000&#34; stroke-width=&#34;1.0&#34; stroke-linejoin=&#34;round&#34; stroke-linecap=&#34;butt&#34; d=&#34;m8.960629 9.800525l0 0c0 -3.8877363 3.1516342 -7.0393696 7.0393705 -7.0393696l0 0c1.8669567 0 3.6574478 0.7416458 4.9775867 2.0617836c1.320137 1.320138 2.0617828 3.1106296 2.0617828 4.9775863l0 0c0 3.8877373 -3.1516323 7.0393705 -7.0393696 7.0393705l0 0c-3.8877363 0 -7.0393705 -3.1516333 -7.0393705 -7.0393705z&#34; fill-rule=&#34;evenodd&#34;/&gt;&lt;path fill=&#34;#000000&#34; fill-opacity=&#34;0.0&#34; d=&#34;m16.0 16.839895l0 0c3.6587353 0 7.167618 1.4534264 9.754732 4.0405426c2.5871162 2.5871162 4.0405426 6.095999 4.0405426 9.754732l-13.795275 0z&#34; fill-rule=&#34;evenodd&#34;/&gt;&lt;path fill=&#34;#000000&#34; fill-opacity=&#34;0.0&#34; d=&#34;m16.0 16.839895l0 0c3.6587353 0 7.167618 1.4534264 9.754732 4.0405426c2.5871162 2.5871162 4.0405426 6.095999 4.0405426 9.754732&#34; fill-rule=&#34;evenodd&#34;/&gt;&lt;path stroke=&#34;#000000&#34; stroke-width=&#34;1.0&#34; stroke-linejoin=&#34;round&#34; stroke-linecap=&#34;butt&#34; d=&#34;m16.0 16.839895l0 0c3.6587353 0 7.167618 1.4534264 9.754732 4.0405426c2.5871162 2.5871162 4.0405426 6.095999 4.0405426 9.754732&#34; fill-rule=&#34;evenodd&#34;/&gt;&lt;path fill=&#34;#000000&#34; fill-opacity=&#34;0.0&#34; d=&#34;m16.0 16.839895l0 0c-3.6587343 0 -7.167617 1.4534264 -9.754733 4.0405426c-2.5871158 2.5871162 -4.0405426 6.095999 -4.0405426 9.754732l13.795276 0z&#34; fill-rule=&#34;evenodd&#34;/&gt;&lt;path fill=&#34;#000000&#34; fill-opacity=&#34;0.0&#34; d=&#34;m16.0 16.839895l0 0c-3.6587343 0 -7.167617 1.4534264 -9.754733 4.0405426c-2.5871158 2.5871162 -4.0405426 6.095999 -4.0405426 9.754732&#34; fill-rule=&#34;evenodd&#34;/&gt;&lt;path stroke=&#34;#000000&#34; stroke-width=&#34;1.0&#34; stroke-linejoin=&#34;round&#34; stroke-linecap=&#34;butt&#34; d=&#34;m16.0 16.839895l0 0c-3.6587343 0 -7.167617 1.4534264 -9.754733 4.0405426c-2.5871158 2.5871162 -4.0405426 6.095999 -4.0405426 9.754732&#34; fill-rule=&#34;evenodd&#34;/&gt;&lt;/g&gt;&lt;/svg&gt;`
<pre></div>