Phone number

import { createKavach } from 'kavachos';
import { phoneAuth } from 'kavachos/auth'; 
import { Twilio } from 'twilio';

const twilio = new Twilio(process.env.TWILIO_SID!, process.env.TWILIO_TOKEN!);

const kavach = await createKavach({
  database: { provider: 'postgres', url: process.env.DATABASE_URL! },
  secret: process.env.KAVACH_SECRET!,
  baseUrl: 'https://auth.example.com',
  plugins: [
    phoneAuth({ 
      onSendCode: async (phone, code) => { 
        await twilio.messages.create({ 
          body: `Your verification code: ${code}`, 
          from: process.env.TWILIO_FROM!, 
          to: phone, 
        }); 
      }, 
      codeLength: 6, 
      codeExpiry: 300, // seconds
    }), 
  ],
});

const res = await fetch('/auth/phone/send-code', {
  method: 'POST',
  headers: { 'Content-Type': 'application/json' },
  body: JSON.stringify({
    phone: '+14155550123', // E.164 format
  }),
});

// Always returns { success: true } to prevent phone enumeration

const res = await fetch('/auth/phone/verify-code', {
  method: 'POST',
  credentials: 'include',
  headers: { 'Content-Type': 'application/json' },
  body: JSON.stringify({
    phone: '+14155550123', 
    code: '482910', 
  }),
});

if (res.ok) {
  const { user, session } = await res.json();
}