Macaron: remove custom Request type (#37874)

* remove macaron.Request, use http.Request instead

* remove com dependency from bindings module

* fix another c.Req.Request

pkg/api/basic_auth.go

@@ -2,15 +2,14 @@ package api
 
 import (
 	"crypto/subtle"
-
-	macaron "gopkg.in/macaron.v1"
+	"net/http"
 )
 
 // BasicAuthenticatedRequest parses the provided HTTP request for basic authentication credentials
 // and returns true if the provided credentials match the expected username and password.
 // Returns false if the request is unauthenticated.
 // Uses constant-time comparison in order to mitigate timing attacks.
-func BasicAuthenticatedRequest(req macaron.Request, expectedUser, expectedPass string) bool {
+func BasicAuthenticatedRequest(req *http.Request, expectedUser, expectedPass string) bool {
 	user, pass, ok := req.BasicAuth()
 	if !ok || subtle.ConstantTimeCompare([]byte(user), []byte(expectedUser)) != 1 || subtle.ConstantTimeCompare([]byte(pass), []byte(expectedPass)) != 1 {
 		return false