Admin-only pprof endpoint with basic auth

                  package admin

import (
  "net/http"
  "net/http/pprof"
)

func basicAuth(user, pass string, next http.Handler) http.Handler {
  return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
    u, p, ok := r.BasicAuth()
    if !ok || u != user || p != pass {
      w.Header().Set("WWW-Authenticate", `Basic realm="pprof"`)
      http.Error(w, "unauthorized", http.StatusUnauthorized)
      return
    }
    next.ServeHTTP(w, r)
  })
}

func Handler(user, pass string) http.Handler {
  mux := http.NewServeMux()
  mux.HandleFunc("/debug/pprof/", pprof.Index)
  mux.HandleFunc("/debug/pprof/profile", pprof.Profile)
  mux.HandleFunc("/debug/pprof/heap", pprof.Handler("heap").ServeHTTP)
  return basicAuth(user, pass, mux)
}