Regional Pricing

<script type="module">
  const mod = await import(
    'https://cdn.shieldlabs.ai/snippet.js?publicKey=YOUR_PUBLIC_KEY'
  );

  // Run a fresh check when the buyer confirms a region and its price.
  // The browser does NOT compute the Risk Score or resolve the country.
  // The callback hands you the requestID, your join key to the server webhook.
  document.getElementById('region-select').addEventListener('change', (e) => {
    mod.forceCheckAuthenticatedUser('a1b2c3d4hasheduserid', (serverResponse, requestID) => {
      document.getElementById('shield-request-id').value = requestID;
      document.getElementById('claimed-region').value = e.target.value; // e.g. "BR"
    });
  });
</script>

<form id="checkout-form" method="POST" action="/api/price">
  <input type="hidden" id="shield-request-id" name="shieldRequestId" />
  <input type="hidden" id="claimed-region" name="claimedRegion" />
  <button type="submit">Continue</button>
</form>

// Anonymizing signals that make a claimed region unverifiable. Match on
// presence in Details, never on exact label text, which can change.
const ANON_SIGNALS = ['vpn', 'proxy', 'privacy relay', 'datacenter', 'tor'];

function isAnonymized(details) {
  return details.some((d) =>
    ANON_SIGNALS.some((s) => d.Description.toLowerCase().includes(s))
  );
}

app.post('/api/price', async (req, res) => {
  const { shieldRequestId, claimedRegion, userId } = req.body;

  // Wait up to ~2s for the webhook; fall back to the History API by request_id.
  const shield = await waitForScore(shieldRequestId, 2000);

  // No result yet is not the same as "verified". Default to the standard
  // price rather than handing out a discount on missing data.
  if (!shield) {
    return res.json({ price: standardPrice(userId), region: 'standard', reason: 'verifying' });
  }

  const anonymized = isAnonymized(shield.details);
  const countryMatches = shield.country === claimedRegion;

  // Masked session: the claimed region cannot be trusted. Your code falls
  // back to the standard price. ShieldLabs only surfaced the signals.
  if (anonymized) {
    return res.json({
      price: standardPrice(userId),
      region: 'standard',
      reason: 'region_unverified_anonymized',
    });
  }

  // Network country does not match the claimed region. Ask for verification
  // (a billing-address or payment-country check) before honoring the discount.
  if (!countryMatches) {
    return res.json({
      price: standardPrice(userId),
      region: 'standard',
      reason: 'region_mismatch',
      verify: true,
    });
  }

  // Country lines up and the session is not masked: honor the regional price.
  return res.json({ price: regionalPrice(claimedRegion), region: claimedRegion });
});