From 46432161b88b8213bd74cf8d8e14d179e8ae51d1 Mon Sep 17 00:00:00 2001
From: dakkar <dakkar@thenautilus.net>
Date: Tue, 17 Dec 2024 09:47:32 +0000
Subject: [PATCH] enforce restrictions for user's rss feed

if `requireSigninToViewContents` in on, no notes are included in the
feed

notes covered by `makeNotesFollowersOnlyBefore` and
`makeNotesHiddenBefore` are skipped
---
 .../backend/src/server/web/FeedService.ts     | 24 ++++++++++++++++++-
 1 file changed, 23 insertions(+), 1 deletion(-)

diff --git a/packages/backend/src/server/web/FeedService.ts b/packages/backend/src/server/web/FeedService.ts
index 57a32ca934..de22a0e80e 100644
--- a/packages/backend/src/server/web/FeedService.ts
+++ b/packages/backend/src/server/web/FeedService.ts
@@ -48,7 +48,7 @@ export class FeedService {
 
 		const profile = await this.userProfilesRepository.findOneByOrFail({ userId: user.id });
 
-		const notes = await this.notesRepository.find({
+		const notes = user.requireSigninToViewContents ? [] : await this.notesRepository.find({
 			where: {
 				userId: user.id,
 				renoteId: IsNull(),
@@ -74,7 +74,16 @@ export class FeedService {
 			copyright: user.name ?? user.username,
 		});
 
+		const followersOnlyBefore = user.makeNotesFollowersOnlyBefore;
+		const hiddenBefore = user.makeNotesHiddenBefore;
+
 		for (const note of notes) {
+			const createdAt = new Date(this.idService.parse(note.id).date);
+
+			if (this.compareDates(followersOnlyBefore, createdAt) || this.compareDates(hiddenBefore, createdAt)) {
+				continue;
+			}
+
 			const files = note.fileIds.length > 0 ? await this.driveFilesRepository.findBy({
 				id: In(note.fileIds),
 			}) : [];
@@ -93,4 +102,17 @@ export class FeedService {
 
 		return feed;
 	}
+
+	// this logic is copied from NoteEntityService.hideNote
+	private compareDates(reference, createdAt: Date): boolean {
+		if ((reference != null)
+				&& (
+					(reference <= 0 && (Date.now() - createdAt.getTime() > 0 - (reference * 1000)))
+						|| (reference > 0 && (createdAt.getTime() < reference * 1000))
+				)
+			 ) {
+			return true;
+		}
+		return false;
+	}
 }