Regional Pricing Abuse

<script type="module">
  const mod = await import(
    'https://cdn.shieldlabs.ai/snippet.js?publicKey=YOUR_PUBLIC_KEY'
  );
  // The browser does NOT compute the Risk Score or resolve the country.
  // The callback's first arg is the client IP the server saw (not a score);
  // the requestID is your join key to the server webhook.
  document.getElementById('region-select').addEventListener('change', (e) => {
    mod.forceCheckAuthenticatedUser('a1b2c3d4hasheduserid', (ip, requestID) => {
      document.getElementById('shield-request-id').value = requestID;
      document.getElementById('claimed-region').value = e.target.value; // e.g. "BR"
    });
  });
</script>

<form id="checkout-form" method="POST" action="/api/price">
  <input type="hidden" id="shield-request-id" name="shieldRequestId" />
  <input type="hidden" id="claimed-region" name="claimedRegion" />
  <button type="submit">Continue</button>
</form>

app.post('/api/price', async (req, res) => {
  const { shieldRequestId, claimedRegion, userId } = req.body;

  // Wait up to ~2s for the webhook; falls back to the History API.
  const shield = await waitForScore(shieldRequestId, 2000);

  // No result yet is not "verified". Default to the standard price rather
  // than handing out a discount on missing data.
  if (!shield) {
    return res.json({ price: standardPrice(userId), region: 'standard', reason: 'verifying' });
  }

  const f = shield.detection_flags ?? {}; // detection_flags booleans, the stable contract

  // Network-level masking that makes the exit country untrustworthy.
  const anonymized =
    f.vpn || f.proxy || f.tor || f.private_relay || f.datacenter_ip || f.browser_vpn_proxy;

  // Compare the claimed region to the real-network country when captured;
  // otherwise fall back to the public-IP country.
  const realCountry = shield.local_ip?.country || shield.public_ip?.country;
  const countryMatches = realCountry === claimedRegion;

  // Masked session: the claimed region cannot be trusted.
  if (anonymized) {
    return res.json({
      price: standardPrice(userId),
      region: 'standard',
      reason: 'region_unverified_anonymized',
    });
  }

  // Public IP and real internal IP resolve to different networks, or the
  // exit country does not match the claim.
  if (f.ip_mismatch || !countryMatches) {
    return res.json({
      price: standardPrice(userId),
      region: 'standard',
      reason: f.ip_mismatch ? 'region_ip_mismatch' : 'region_mismatch',
      verify: true,
    });
  }

  // Countries line up and the session is not masked: honor the regional price.
  return res.json({ price: regionalPrice(claimedRegion), region: claimedRegion });
});