Overage

<!-- YOUR_SITE_KEY: copy it from https://lamp.ar/dashboard. The widget works only on the addresses you list there. -->

<!-- Ask for the check, then verify the token on your server (step 2): the page stays protected even without JavaScript -->
<script src="https://lamp.ar/overage.js" data-site-key="YOUR_SITE_KEY"></script>
<script>
  // result: { result: "pass", token } | { result: "fail" } | { result: "cancelled" }
  AgeGate.verify().then(function (r) {
    if (r.result === "pass") {
      fetch("/api/age-verified", { method: "POST", body: r.token });  // verify on your server
    }
  });
</script>

// npm i jose
import { createRemoteJWKSet, jwtVerify } from "jose";

const JWKS = createRemoteJWKSet(new URL("https://lamp.ar/.well-known/jwks.json"));

export async function isAdult(token) {
  const { payload } = await jwtVerify(token, JWKS, {
    issuer: "https://lamp.ar",
    audience: "YOUR_SITE_KEY",
  });                               // also checks the signature and expiry (10 minutes)
  return payload.age_over >= 18;   // then set your own session cookie
}