Going to production

const { safeVerifyFoilToken } = require('@abxy/foil-server');

app.post('/signup', async (req, res) => {
  const result = safeVerifyFoilToken(
    req.body.foil.sealedToken,
    process.env.FOIL_SECRET_KEY,
  );

  // Log but don't block
  if (result.ok) {
    console.log('Foil verdict:', result.data.decision.verdict, 'score:', result.data.decision.risk_score);
  }

  // Continue with signup regardless
  createAccount(req.body);
});

from foil_server import safe_verify_foil_token
import os

@app.post("/signup")
def signup(request):
    result = safe_verify_foil_token(
        request.json["foil"]["sealedToken"],
        os.environ["FOIL_SECRET_KEY"],
    )

    # Log but don't block
    if result.ok:
        logger.info(
            f"Foil verdict: {result.data.decision.verdict}, "
            f"score: {result.data.decision.risk_score}"
        )

    # Continue with signup regardless
    create_account(request.json)

curl https://api.usefoil.com/v1/sessions/sid_... \
  -H "Authorization: Bearer sk_live_..."