package proxy

import (
	"slices"
)

// countryDenied reports whether the country lists refuse the request, by
// the client's country as it was looked up. A client without a country,
// or whose country cannot be found, is refused only by
// SWWAF_EXCLUSIVELY_ALLOWED_COUNTRIES.
func (rq *request) countryDenied() bool {
	denied := rq.h.config.DeniedCountries
	allowed := rq.h.config.ExclusivelyAllowedCountries
	country := rq.line.Country

	if slices.Contains(denied, country) {
		return true
	}

	return len(allowed) > 0 && !slices.Contains(allowed, country)
}