feat(api): Filter out remote placeholder users from local queries

- Add SQL filter to exclude users with '@' in handle from admin users endpoint
- Update search endpoint to filter remote placeholder users from results
- Modify users listing endpoint to exclude federated user handles
- Prevent remote placeholder accounts from appearing in local user lists and search results
This commit is contained in:
Christomatt
2026-01-26 19:27:42 +01:00
parent bb9245ab99
commit 20055e5d2b
3 changed files with 7 additions and 3 deletions
+2 -1
View File
@@ -1,7 +1,7 @@
import { NextResponse } from 'next/server';
import { db, users } from '@/db';
import { requireAdmin } from '@/lib/auth/admin';
import { desc } from 'drizzle-orm';
import { desc, sql } from 'drizzle-orm';
export async function GET(request: Request) {
try {
@@ -27,6 +27,7 @@ export async function GET(request: Request) {
isBot: users.isBot,
})
.from(users)
.where(sql`${users.handle} NOT LIKE '%@%'`)
.orderBy(desc(users.createdAt))
.limit(limit);
+4 -1
View File
@@ -106,7 +106,7 @@ export async function GET(request: Request) {
eq(users.isSuspended, false),
eq(users.isSilenced, false)
);
searchUsers = await db.select({
const localUsers = await db.select({
id: users.id,
handle: users.handle,
displayName: users.displayName,
@@ -117,6 +117,9 @@ export async function GET(request: Request) {
.from(users)
.where(userConditions)
.limit(limit);
// Filter out remote placeholder users (those with @ in handle)
searchUsers = localUsers.filter(u => !u.handle.includes('@'));
}
// Federated user lookup (exact handle@domain queries)
+1 -1
View File
@@ -23,7 +23,7 @@ export async function GET(request: NextRequest) {
isBot: users.isBot,
})
.from(users)
.where(sql`${users.isSuspended} IS FALSE`)
.where(sql`${users.isSuspended} IS FALSE AND ${users.handle} NOT LIKE '%@%'`)
.orderBy(desc(users.createdAt))
.limit(limit);