From cd15b5c268796a2b0243cc3278dbe4ade75084c1 Mon Sep 17 00:00:00 2001
From: Sam Symons <sam@samsymons.com>
Date: Mon, 27 Nov 2023 06:25:58 -0800
Subject: [PATCH] Only show NetP to US users.

---
 .../NetworkProtectionAccessController.swift   | 31 ++++++++++++++++---
 1 file changed, 26 insertions(+), 5 deletions(-)

diff --git a/DuckDuckGo/NetworkProtectionAccessController.swift b/DuckDuckGo/NetworkProtectionAccessController.swift
index 7b1faaacce..16da156180 100644
--- a/DuckDuckGo/NetworkProtectionAccessController.swift
+++ b/DuckDuckGo/NetworkProtectionAccessController.swift
@@ -56,32 +56,53 @@ struct NetworkProtectionAccessController: NetworkProtectionAccess {
     private let networkProtectionWaitlistStorage: WaitlistStorage
     private let networkProtectionTermsAndConditionsStore: NetworkProtectionTermsAndConditionsStore
     private let featureFlagger: FeatureFlagger
+    private let internalUserDecider: InternalUserDecider
+
+    private var isUserLocaleAllowed: Bool {
+        var regionCode: String?
+
+        if #available(iOS 16.0, *) {
+            regionCode = Locale.current.region?.identifier
+        } else {
+            regionCode = Locale.current.regionCode
+        }
+
+        return (regionCode ?? "US") == "US"
+    }
+
 
     init(
         networkProtectionActivation: NetworkProtectionFeatureActivation = NetworkProtectionKeychainTokenStore(),
         networkProtectionWaitlistStorage: WaitlistStorage = WaitlistKeychainStore(waitlistIdentifier: VPNWaitlist.identifier),
         networkProtectionTermsAndConditionsStore: NetworkProtectionTermsAndConditionsStore = NetworkProtectionTermsAndConditionsUserDefaultsStore(),
-        featureFlagger: FeatureFlagger = AppDependencyProvider.shared.featureFlagger
+        featureFlagger: FeatureFlagger = AppDependencyProvider.shared.featureFlagger,
+        internalUserDecider: InternalUserDecider = AppDependencyProvider.shared.internalUserDecider
     ) {
         self.networkProtectionActivation = networkProtectionActivation
         self.networkProtectionWaitlistStorage = networkProtectionWaitlistStorage
         self.networkProtectionTermsAndConditionsStore = networkProtectionTermsAndConditionsStore
         self.featureFlagger = featureFlagger
+        self.internalUserDecider = internalUserDecider
     }
 
     func networkProtectionAccessType() -> NetworkProtectionAccessType {
-        // First, check for users who have activated the VPN via an invite code:
+        // Only show NetP to US or internal users:
+        guard isUserLocaleAllowed || internalUserDecider.isInternalUser else {
+            return .none
+        }
+
+        // Check for users who have activated the VPN via an invite code:
         if networkProtectionActivation.isFeatureActivated && !networkProtectionWaitlistStorage.isInvited {
             return .inviteCodeInvited
         }
 
-        // Next, check if the waitlist is still active; if not, the user has no access.
+        // Check if the waitlist is still active; if not, the user has no access.
         let isWaitlistActive = featureFlagger.isFeatureOn(.networkProtectionWaitlistActive)
         if !isWaitlistActive {
             return .none
         }
 
-        // Next, check if a waitlist user has NetP access and whether they need to accept T&C.
+        // Check if a waitlist user has NetP access and whether they need to accept T&C.
         if networkProtectionActivation.isFeatureActivated && networkProtectionWaitlistStorage.isInvited {
             if networkProtectionTermsAndConditionsStore.networkProtectionWaitlistTermsAndConditionsAccepted {
                 return .waitlistInvited
@@ -90,7 +111,7 @@ struct NetworkProtectionAccessController: NetworkProtectionAccess {
             }
         }
 
-        // Next, check if the user has waitlist access at all and whether they've already joined.
+        // Check if the user has waitlist access at all and whether they've already joined.
         let hasWaitlistAccess = featureFlagger.isFeatureOn(.networkProtectionWaitlistAccess)
         if hasWaitlistAccess {
             if networkProtectionWaitlistStorage.isOnWaitlist {