Overage

<!-- Simplest: one line. Covers the page until the visitor passes, remembers it until the tab is closed -->
<script src="https://lamp.ar/overage.js" data-site-key="YOUR_SITE_KEY" data-auto="gate"></script>

<!-- Or call it yourself and verify the token on your server -->
<script src="https://lamp.ar/overage.js" data-site-key="YOUR_SITE_KEY"></script>
<script>
  // result: { result: "pass", token } | { result: "fail" } | { result: "cancelled" }
  AgeGate.verify().then(function (r) {
    if (r.result === "pass") {
      fetch("/api/age-verified", { method: "POST", body: r.token });  // verify on your server
    }
  });
</script>

// npm i jose
import { createRemoteJWKSet, jwtVerify } from "jose";

const JWKS = createRemoteJWKSet(new URL("https://lamp.ar/.well-known/jwks.json"));

export async function isAdult(token) {
  const { payload } = await jwtVerify(token, JWKS, {
    issuer: "https://lamp.ar",
    audience: "YOUR_SITE_KEY",
  });
  return payload.age_over >= 18;   // then set your own session cookie
}