Verify sign-ups

// On your server, never in the browser: the key must stay secret.
const MAGPIE = "https://api.magpie-cloud.com/v1";

async function verifyEmail(email) {
  try {
    const res = await fetch(`${MAGPIE}/verify`, {
      method: "POST",
      headers: {
        Authorization: `Bearer ${process.env.MAGPIE_API_KEY}`,
        "Content-Type": "application/json",
      },
      body: JSON.stringify({ email }),
      // Don't keep someone waiting on a slow mail server.
      signal: AbortSignal.timeout(10_000),
    });
    if (!res.ok) {
      console.error("Email check failed", res.status);
      return null;
    }
    return await res.json();
  } catch {
    return null; // timed out, or unreachable
  }
}

export async function checkSignUp(email) {
  const result = await verifyEmail(email);
  // No answer from us is never the person's fault: let them in, check later.
  if (!result) return { ok: true, recheck: true };

  switch (result.verdict) {
    case "valid":
      return { ok: true, verdict: "valid" };
    case "invalid":
      return { ok: false, message: "That address can't get email. Is there a typo?" };
    case "catch_all":
    case "risky":
      // Let them in, but confirm the address before you rely on it.
      return { ok: true, verdict: result.verdict, confirm: true };
    default: // "unknown"
      return { ok: true, recheck: true };
  }
}

# On your server, never in the browser: the key must stay secret.
import os
import logging
import requests

MAGPIE = "https://api.magpie-cloud.com/v1"

def verify_email(email):
    try:
        res = requests.post(
            f"{MAGPIE}/verify",
            json={"email": email},
            headers={"Authorization": f"Bearer {os.environ['MAGPIE_API_KEY']}"},
            timeout=10,  # don't keep someone waiting on a slow mail server
        )
    except requests.RequestException:
        return None  # timed out, or unreachable
    if not res.ok:
        logging.error("Email check failed: %s", res.status_code)
        return None
    return res.json()

def check_sign_up(email):
    result = verify_email(email)
    # No answer from us is never the person's fault: let them in, check later.
    if result is None:
        return {"ok": True, "recheck": True}

    verdict = result["verdict"]
    if verdict == "valid":
        return {"ok": True, "verdict": "valid"}
    if verdict == "invalid":
        return {"ok": False, "message": "That address can't get email. Is there a typo?"}
    if verdict in ("catch_all", "risky"):
        # Let them in, but confirm the address before you rely on it.
        return {"ok": True, "verdict": verdict, "confirm": True}
    return {"ok": True, "recheck": True}  # "unknown"