From 7baee08a07825597057a96bfae639b8f7d974bde Mon Sep 17 00:00:00 2001
From: Seongmin Lee <git@boltless.me>
Date: Tue, 30 Jun 2026 04:29:12 +0900
Subject: [PATCH] appview: auth-gate repo search

Signed-off-by: Seongmin Lee <git@boltless.me>
---
 appview/pages/templates/search/search.html | 11 ++++++++++-
 appview/state/search.go                    |  5 +++++
 2 files changed, 15 insertions(+), 1 deletion(-)

diff --git a/appview/pages/templates/search/search.html b/appview/pages/templates/search/search.html
index 9aac9823..e3c6cf7d 100644
--- a/appview/pages/templates/search/search.html
+++ b/appview/pages/templates/search/search.html
@@ -100,7 +100,16 @@
       {{ template "codeSearchResults" . }}
     {{ end }}
   {{ else }}
-    {{ template "repoSearchResults" . }}
+    {{ if not .LoggedInUser }}
+      <div class="flex items-center gap-2 my-2 bg-orange-50 dark:bg-orange-900/30 border border-orange-300 dark:border-orange-700 rounded px-3 py-2 text-orange-600 dark:text-orange-300 text-sm">
+        {{ i "circle-alert" "size-4" }}
+        {{ $url := "/search?type=repo" -}}
+        <span>Global repository search is temporarily disabled to unauthenticated users.
+          <a href="/login?return_url={{ $url }}" class="underline">Login</a> to search repos.</span>
+      </div>
+    {{ else }}
+      {{ template "repoSearchResults" . }}
+    {{ end }}
   {{ end }}
 {{ end }}
 
diff --git a/appview/state/search.go b/appview/state/search.go
index de290132..a7a81eca 100644
--- a/appview/state/search.go
+++ b/appview/state/search.go
@@ -49,6 +49,11 @@ func (s *State) handleRepoSearch(w http.ResponseWriter, r *http.Request) {
 		}
 	}()
 
+	// blame me
+	if params.BaseParams.LoggedInUser == nil {
+		return
+	}
+
 	var language string
 	if lang := cmp.Or(q.Get("language"), q.Get("lang")); lang != nil {
 		language = *lang
-- 
2.51.2