I want to get a users location based off their IP address. So I will get the browser to prompt the user for their location using the geolocation api and send that information to my backend.

Is it possible for users to edit the javascript that sends the geolocation to my server before the request happens? If so, what is a good way to circumvent this and get true location?

I am planning on not allowing those coming from Tor or a VPN, so that's not of concern to me. Just trying to make sure that users won't edit the javascript to be in a different area.

I saw I could use something like ipinfo.io with my Python server, but I'm not sure if this is as accurate as prompting the user for their location via the browser. (I'm trying to get their exact location, like a ride share app or any maps app has it).