Express · persona-request
import express from 'express';
import { Verifier, type PersonaSession } from '@persona-claims/verifier';
import { PersonaResponseSchema, dns } from '@persona-claims/core';
// DNS: _claims.store.example TXT "service:<VERIFIER_PUBLIC_KEY>"
const verifier = new Verifier({
publicKey: process.env.VERIFIER_PUBLIC_KEY!,
signingKey: loadVerifierKeyPair(),
receiverUrl: 'https://store.example/api/persona/respond',
resolver: new dns.NodeResolver(),
dnsPolicy: 'strict'
});
const pending = new Map<string, PersonaSession>();
const app = express();
app.use(express.json());
app.post('/api/persona/request', async (_req, res) => {
const session = await verifier.request([
{ typ: 'name.first', reason: 'We need your given name on the ticket', required: true },
{ typ: 'persona.is18', reason: 'Age-restricted venue', required: true }
]);
pending.set(session.request.id, session);
res.json({ request: session.request });
});
app.post('/api/persona/respond', async (req, res) => {
const response = PersonaResponseSchema.parse(req.body);
const session = pending.get(response.id);
if (!session) return res.status(400).json({ error: 'неизвестный запрос' });
pending.delete(response.id);
const status = await session.verify(response);
if (!status.ok) {
return res.status(400).json({ error: 'ответ не прошёл проверку' });
}
res.json({ ok: true });
});