Verification API

// Step 1: Send the OTP to the user
const verification = await client.verify.create({
  to: "+15551234567",
  channel: "sms",
  // Optional: custom template
  template: "Your {{brand}} verification code is: {{code}}",
});

// verification.status → "pending"
// An SMS with a 6-digit code is sent to the user

// Step 2: Check the code the user entered
const result = await client.verify.check({
  to: "+15551234567",
  code: userEnteredCode,  // e.g. "847291"
});

if (result.status === "approved") {
  // ✓ User is verified — proceed with signup/login
  await createUserSession(result.to);
} else {
  // ✗ Invalid or expired code
  return { error: "Invalid code. Please try again." };
}

// Fraud Guard is enabled by default on all verifications.
// You can monitor and configure it in the dashboard.

// Example: Check if a number was blocked
const status = await client.fraudGuard.check("+15551234567");
// status.blocked → true | false
// status.reason  → "pumping_suspected" | "rate_limit" | "geo_block"

// Default rate limits per phone number:
// - 5 verification attempts per 10 minutes
// - 1 successful verification per 10 minutes (for the same number)

// Customize for your service (dashboard or API):
const service = await client.verify.services.update("VA_xxxx", {
  codeLength: 6,
  lookupEnabled: true,
  fraudGuardEnabled: true,
  rateLimits: {
    maxAttempts: 3,
    windowMinutes: 10,
  },
});