Stytch — SMS OTP and magic links

const { WebApp } = require(class="tk-str">'@hyperbridge/forge/server');
const stytch    = require(class="tk-str">'stytch');
const client   = new stytch.Client({
  project_id: process.env.STYTCH_PROJECT_ID,
  secret:     process.env.STYTCH_SECRET,
});

const app = new WebApp();

app.post(class="tk-str">'/auth/sms', async (c) => {
  const { phone } = await c.req.json();
  await client.otps.sms.loginOrCreate({ phone_number: phone });
  return c.json({ sent: true });
});

app.post(class="tk-str">'/auth/verify', async (c) => {
  const { method_id, code } = await c.req.json();
  const r = await client.otps.authenticate({ method_id, code });
  return c.json({ session: r.session_token });
});

app.listen(3000);