code: func getRequestingClientFromRequest(r *http.Request, w http.ResponseWriter, organizationGlobalID string, allowOnWebsite bool) (string, bool) {
  	requestingClient, validClient := context.Get(r, "client_id").(string)
  	if !validClient {
  		http.Error(w, http.StatusText(http.StatusInternalServerError), http.StatusInternalServerError)
  		return requestingClient, false
  	}
  	if requestingClient == "itsyouonline" {
  		if allowOnWebsite {
  			requestingClient = organizationGlobalID
  		} else {
  			// This should never happen as the oauth 2  middleware should give a 403
  			writeErrorResponse(w, http.StatusBadRequest, "This api call is not available when logged in via the website")
  			return requestingClient, false
  		}
  	} else if requestingClient != organizationGlobalID {
  		writeErrorResponse(w, http.StatusForbidden, "unauthorized_organization")
  		return requestingClient, false
  	}
  	return requestingClient, true
  }
docs: // getRequestingClientFromRequest validates if a see api call is valid for an organization