Overview

Make instance-level RSS feeds available for private instances.

Background

Right now, a private instance locks down access to all posts within the instance. With secret RSS feeds, members of those instances could subscribe to updates on a private WF instance from their favorite RSS reader without additional authentication.

Implementation

For each user, generate an unguessable string to append to feed URLs. Then, accessing http://instance/read/feed/{unique_string} should return the instance's RSS feed, provided:

• The unique string is valid
• The user associated with that unique string isn't suspended
• The user associated with that unique string exists