Use os.Getenv

03-Gin/main.go

@@ -2,28 +2,31 @@ package main
 
 import (
 	"net/http"
+	"os"
 
 	"github.com/gin-gonic/gin"
 	"github.com/passageidentity/passage-go"
 )
 
 func authRequired() gin.HandlerFunc {
 	return func(c *gin.Context) {
-		psg, _ := passage.New("<Passage App ID>", &passage.Config{
-			APIKey: "<Passage API Key>",
+		psg, _ := passage.New(os.Getenv("PASSAGE_APP_ID"), &passage.Config{
+			APIKey: os.Getenv("PASSAGE_API_KEY"),
 		})
 		passageUserID, err := psg.AuthenticateRequest(c.Request)
 		if err != nil {
 			// Authentication failed!
 			c.HTML(http.StatusForbidden, "unauthorized.html", nil)
 			c.Abort()
+			return
 		}
 
 		// Get the authenticated user's email and set it in the context
 		passageUser, err := psg.GetUser(passageUserID)
 		if err != nil {
 			// This should not fail, but abort the request if it does
 			c.AbortWithStatus(http.StatusInternalServerError)
+			return
 		}
 		c.Set("userEmail", passageUser.Email)