30 lines
951 B
JavaScript
30 lines
951 B
JavaScript
import { GraphQLError } from 'graphql'
|
|
|
|
// this function makes america more secure apparently
|
|
export default async function assertGofacYourself ({ models, headers, ip }) {
|
|
const country = await gOFACYourself({ models, headers, ip })
|
|
if (!country) return
|
|
|
|
throw new GraphQLError(
|
|
`Your IP address is in ${country}. We cannot provide financial services to residents of ${country}.`,
|
|
{ extensions: { code: 'FORBIDDEN' } })
|
|
}
|
|
|
|
export async function gOFACYourself ({ models, headers = {}, ip }) {
|
|
const { 'x-forwarded-for': xForwardedFor, 'x-real-ip': xRealIp } = headers
|
|
ip ||= xRealIp || xForwardedFor?.split(',')?.[0]
|
|
if (!ip) return false
|
|
|
|
try {
|
|
const countries = await models.$queryRaw`
|
|
SELECT * FROM "OFAC" WHERE iprange("startIP","endIP") >>= ${ip}::ipaddress`
|
|
|
|
if (countries.length === 0) return false
|
|
|
|
return countries[0].country
|
|
} catch (e) {
|
|
console.error('gOFACYourself', e)
|
|
return false
|
|
}
|
|
}
|