Allow Italy and Spain in free mode country gate

Author: jahooma

web/src/app/api/v1/freebuff/session/__tests__/session.test.ts

@@ -230,15 +230,15 @@ describe('POST /api/v1/freebuff/session', () => {
   test('returns country_blocked without joining the queue for disallowed country', async () => {
     const sessionDeps = makeSessionDeps()
     const resp = await postFreebuffSession(
-      makeReq('ok', { cfCountry: 'ES' }),
+      makeReq('ok', { cfCountry: 'PT' }),
       makeDeps(sessionDeps, 'u1'),
     )
     // 403 (not 200) so older CLIs that don't know `country_blocked` fall into
     // their error-retry backoff instead of tight-polling.
     expect(resp.status).toBe(403)
     const body = await resp.json()
     expect(body.status).toBe('country_blocked')
-    expect(body.countryCode).toBe('ES')
+    expect(body.countryCode).toBe('PT')
     expect(body.countryBlockReason).toBe('country_not_allowed')
     expect(sessionDeps.rows.size).toBe(0)
   })
@@ -326,13 +326,13 @@ describe('GET /api/v1/freebuff/session', () => {
   test('returns country_blocked for disallowed country on GET', async () => {
     const sessionDeps = makeSessionDeps()
     const resp = await getFreebuffSession(
-      makeReq('ok', { cfCountry: 'ES' }),
+      makeReq('ok', { cfCountry: 'PT' }),
       makeDeps(sessionDeps, 'u1'),
     )
     expect(resp.status).toBe(403)
     const body = await resp.json()
     expect(body.status).toBe('country_blocked')
-    expect(body.countryCode).toBe('ES')
+    expect(body.countryCode).toBe('PT')
     expect(body.countryBlockReason).toBe('country_not_allowed')
   })
 
@@ -358,7 +358,7 @@ describe('GET /api/v1/freebuff/session', () => {
     })
     let countryChecks = 0
     const resp = await getFreebuffSession(
-      makeReq('ok', { cfCountry: 'ES' }),
+      makeReq('ok', { cfCountry: 'PT' }),
       makeDeps(sessionDeps, 'u1', {
         getCountryAccess: async (req) => {
           countryChecks++

web/src/server/__tests__/free-mode-country.test.ts

@@ -31,6 +31,8 @@ describe('free mode country access', () => {
     ['IL', 'IL'],
     ['FR', 'FR'],
     ['BE', 'BE'],
+    ['IT', 'IT'],
+    ['ES', 'ES'],
   ])('allows allowlisted Cloudflare country %s', async (header, expected) => {
     const access = await getFreeModeCountryAccess(
       makeReq({
@@ -46,11 +48,11 @@ describe('free mode country access', () => {
 
   test('blocks countries outside the allowlist', async () => {
     const access = await getFreeModeCountryAccess(
-      makeReq({ 'cf-ipcountry': 'ES' }),
+      makeReq({ 'cf-ipcountry': 'PT' }),
       noAnonymousNetwork,
     )
     expect(access.allowed).toBe(false)
-    expect(access.countryCode).toBe('ES')
+    expect(access.countryCode).toBe('PT')
     expect(access.blockReason).toBe('country_not_allowed')
   })
 
@@ -297,7 +299,7 @@ describe('free mode country access', () => {
 
   test('allowLocalhost does not bypass when cf-ipcountry is set', async () => {
     const access = await getFreeModeCountryAccess(
-      makeReq({ 'cf-ipcountry': 'ES' }),
+      makeReq({ 'cf-ipcountry': 'PT' }),
       {
         ipinfoToken: 'test-token',
         allowLocalhost: true,

web/src/server/free-mode-country.ts

@@ -20,6 +20,8 @@ export const FREE_MODE_ALLOWED_COUNTRIES = new Set([
   'DK',
   'DE',
   'FR',
+  'IT',
+  'ES',
   'FI',
   'BE',
   'LU',