middleware.go

// Added import
import "crypto/subtle"

// Before
if !ok || reqUsername != username || reqPassword != password {

// After
usernameMatch := subtle.ConstantTimeCompare([]byte(reqUsername), []byte(username)) == 1
passwordMatch := subtle.ConstantTimeCompare([]byte(reqPassword), []byte(password)) == 1
if !ok || !usernameMatch || !passwordMatch {Termuxu/Androidu (Go 1.26.getPathFromContext()- duplikatgetPathWithFallback()
handleMetrics()/ recordRequestMetrics()— neizvezeni naslijeđeni omotači
Nekorištene metričke varijable na razini paketa
computeResponseSize()— duplikat umetnutog tekstac.Writer.Size()

Start with middleware.go and separate the constant-time credential comparison from the listed cleanup items. Inspect getPathFromContext(), getPathWithFallback(), handleMetrics(), recordRequestMetrics(), package-level metric variables, and computeResponseSize(); done means the requested duplicates, wrappers, and unused variables are resolved without losing the intended middleware behavior.

Written by the indexing model from the issue text.