Integration Guide

import express from 'express';
import fetch from 'node-fetch';

const app = express();
app.use(express.json());

const EYES_SECRET_KEY = process.env.EYES_SECRET_KEY;
const API_URL = 'https://api.theallseeingeyes.org';

// Middleware to verify visitor
async function verifyVisitor(req, res, next) {
  const { visitorId, requestId } = req.body;
  
  if (!visitorId) {
    return res.status(400).json({ error: 'visitorId required' });
  }
  
  try {
    const response = await fetch(`${API_URL}/v1/verify`, {
      method: 'POST',
      headers: {
        'Authorization': `Bearer ${EYES_SECRET_KEY}`,
        'Content-Type': 'application/json',
      },
      body: JSON.stringify({ visitorId, requestId }),
    });
    
    const verification = await response.json();
    req.eyes = verification;
    next();
  } catch (error) {
    console.error('Verification failed:', error);
    // Fail open - don't block on verification errors
    next();
  }
}

app.post('/api/checkout', verifyVisitor, (req, res) => {
  const { risk } = req.eyes || {};
  
  if (risk?.level === 'critical') {
    return res.status(403).json({
      error: 'Transaction blocked for security reasons'
    });
  }
  
  if (risk?.level === 'high') {
    return res.status(428).json({
      requiresVerification: true
    });
  }
  
  // Process checkout...
  res.json({ success: true });
});

app.listen(3000);