From 846b860c06c7a69d1afb6dcc644b16dc0b46dca2 Mon Sep 17 00:00:00 2001
From: DebaucheryLibrarian <moonloop.adult@protonmail.com>
Date: Sat, 15 May 2021 02:51:52 +0200
Subject: [PATCH] Hiding scene photos and trailers from guests.

---
 assets/components/releases/banner.vue  | 42 +++++++++++++++++++++++---
 assets/components/releases/release.vue |  4 +++
 migrations/20190325001339_releases.js  |  6 ++++
 src/web/server.js                      | 12 ++++++++
 4 files changed, 60 insertions(+), 4 deletions(-)

diff --git a/assets/components/releases/banner.vue b/assets/components/releases/banner.vue
index 6e660f55..e5a016dd 100644
--- a/assets/components/releases/banner.vue
+++ b/assets/components/releases/banner.vue
@@ -107,6 +107,14 @@
 					</span>
 				</a>
 			</div>
+
+			<div
+				v-if="!me"
+				class="item-container item-more"
+			><router-link
+				:to="{ name: 'signup', query: { ref: $route.path } }"
+				class="link"
+			>Sign up</router-link>&nbsp;for more photos, trailers and features!</div>
 		</div>
 	</div>
 </template>
@@ -118,6 +126,10 @@ function sfw() {
 	return this.$store.state.ui.sfw;
 }
 
+function me() {
+	return this.$store.state.auth.user;
+}
+
 function poster() {
 	if (this.release.poster) {
 		return this.getPath(this.release.poster, 'thumbnail');
@@ -181,6 +193,7 @@ export default {
 		};
 	},
 	computed: {
+		me,
 		photos,
 		poster,
 		sfw,
@@ -191,10 +204,6 @@ export default {
 <style lang="scss" scoped>
 @import 'breakpoints';
 
-.media-container {
-	backdrop-filter: blur(1rem);
-}
-
 .media {
     flex-shrink: 0;
     white-space: nowrap;
@@ -204,6 +213,7 @@ export default {
 .media.center {
 	width: 1200px;
 	max-width: 100%;
+	display: flex;
 	margin: 0 auto;
 }
 
@@ -284,6 +294,22 @@ export default {
 	background-size: cover;
 }
 
+.item-more {
+	height: auto;
+	flex-grow: 1;
+	align-items: center;
+	padding: .5rem 2rem;
+	color: var(--text-light);
+	text-shadow: 0 0 3px var(--darken);
+	font-weight: bold;
+	font-size: 1rem;
+
+	.link {
+		color: inherit;
+		text-decoration: underline;
+	}
+}
+
 .trailer-container {
 	width: 32rem;
     max-width: 100%;
@@ -311,6 +337,14 @@ export default {
 }
 
 @media(max-width: $breakpoint-micro) {
+	.media.center {
+		flex-direction: column;
+	}
+
+	.item-more {
+		font-size: .9rem;
+	}
+
 	.media:not(.expanded) .item,
     .trailer-container {
 		height: 56vw; /* 16:9 ratio for full-width video */
diff --git a/assets/components/releases/release.vue b/assets/components/releases/release.vue
index 69473276..da5b6f17 100644
--- a/assets/components/releases/release.vue
+++ b/assets/components/releases/release.vue
@@ -327,6 +327,10 @@ export default {
 .banner {
 	background-position: center;
 	background-size: cover;
+
+	::v-deep .scrollable {
+		backdrop-filter: blur(1rem);
+	}
 }
 
 .info {
diff --git a/migrations/20190325001339_releases.js b/migrations/20190325001339_releases.js
index 00588b46..a6d738e9 100644
--- a/migrations/20190325001339_releases.js
+++ b/migrations/20190325001339_releases.js
@@ -1574,6 +1574,12 @@ exports.up = knex => Promise.resolve()
 			CREATE POLICY notifications_policy_update ON notifications FOR UPDATE USING (notifications.user_id = current_user_id());
 			CREATE POLICY notifications_policy_delete ON notifications FOR DELETE USING (notifications.user_id = current_user_id());
 			CREATE POLICY notifications_policy_insert ON notifications FOR INSERT WITH CHECK (true);
+
+			ALTER TABLE releases_photos ENABLE ROW LEVEL SECURITY;
+			CREATE POLICY releases_photos_select ON releases_photos FOR SELECT USING (current_user_id() IS NOT NULL);
+
+			ALTER TABLE releases_trailers ENABLE ROW LEVEL SECURITY;
+			CREATE POLICY releases_trailers_select ON releases_trailers FOR SELECT USING (current_user_id() IS NOT NULL);
 		`, {
 			visitor: knex.raw(config.database.query.user),
 		});
diff --git a/src/web/server.js b/src/web/server.js
index e0541113..999e4c41 100644
--- a/src/web/server.js
+++ b/src/web/server.js
@@ -62,6 +62,10 @@ const {
 	updateNotification,
 } = require('./alerts');
 
+function getIp(req) {
+    return req.headers['x-forwarded-for'] ? req.headers['x-forwarded-for'].split(',')[0] : req.connection.remoteAddress; // See src/ws
+}
+
 async function initServer() {
 	const app = express();
 	const router = Router();
@@ -87,6 +91,14 @@ async function initServer() {
 		next();
 	});
 
+	router.use((req, res, next) => {
+		const ip = getIp(req);
+
+		logger.silly(`${ip} (${req.headers['CF-IPCountry'] || 'country N/A'}) requested ${req.originalUrl} as ${req.session.user ? `${req.session.user.username} (${req.session.user.id})` : 'guest'}`);
+
+		next();
+	});
+
 	router.get('/api/session', fetchMe);
 	router.post('/api/session', login);
 	router.delete('/api/session', logout);