CORS protected Intercom Identity Verification and GEO lookup VCL

sub vcl_recv {
  if (req.http.host == "domain.com" && req.url.path == "/user") {
    error 601 "user";
  }
}

sub vcl_error {
  if (obj.status == 601) {
    set obj.http.Content-Type = "text/json";
    set obj.status = 200;
    if (req.http.Origin ~ "localhost|domain\.com") {
      set obj.http.Access-Control-Allow-Origin = req.http.Origin;
      set obj.http.Access-Control-Allow-Credentials = "true";
      synthetic {"{
    "country": ""} client.geo.country_code {"""} if (<UserId>, {",
    "identifier": ""} regsub(digest.hmac_sha256("<KEY>", <UserId>), "^0x","") {"""}, "") {"
}"};
    } else {
      synthetic {"{}"};
    }
    return(deliver);
  }
 }