Vercel integration

import "server-only";

const PRODUCTS = {
  email: {
    url: "https://emailreputation.abstractapi.com/v1/",
    envVar: "ABSTRACT_EMAIL_INTELLIGENCE_API_KEY",
  },
  phone: {
    url: "https://phoneintelligence.abstractapi.com/v1/",
    envVar: "ABSTRACT_PHONE_INTELLIGENCE_API_KEY",
  },
  ip: {
    url: "https://ip-intelligence.abstractapi.com/v1/",
    envVar: "ABSTRACT_IP_INTELLIGENCE_API_KEY",
  },
} as const;

type Product = keyof typeof PRODUCTS;

// Returns the API response, or null when the product is not installed,
// the call failed or it timed out. Callers treat null as "no signal".
export async function abstractCheck(
  product: Product,
  params: Record<string, string>,
): Promise<Record<string, any> | null> {
  const { url, envVar } = PRODUCTS[product];
  const key = process.env[envVar];
  if (!key) return null;

  try {
    const res = await fetch(`${url}?${new URLSearchParams(params)}`, {
      headers: { Authorization: `Bearer ${key}` },
      signal: AbortSignal.timeout(5000),
      cache: "no-store",
    });
    if (!res.ok) return null;
    return await res.json();
  } catch {
    return null;
  }
}

import "server-only";
import { headers } from "next/headers";

// On Vercel, the first address in x-forwarded-for is the visitor's.
export async function clientIp(): Promise<string | null> {
  const h = await headers();
  return h.get("x-forwarded-for")?.split(",")[0]?.trim() || h.get("x-real-ip") || null;
}

"use server";

import { abstractCheck } from "@/lib/abstract";
import { clientIp } from "@/lib/client-ip";

export async function signup(formData: FormData) {
  const email = String(formData.get("email") ?? "").trim();
  const phone = String(formData.get("phone") ?? "").replace(/\D/g, "");
  const ip = await clientIp();

  const [e, p, i] = await Promise.all([
    abstractCheck("email", { email }),
    phone ? abstractCheck("phone", { phone }) : null,
    ip ? abstractCheck("ip", { ip_address: ip, fields: "security,location" }) : null,
  ]);

  const block =
    e?.email_quality?.is_disposable === true ||
    e?.email_deliverability?.status === "undeliverable" ||
    p?.phone_validation?.is_valid === false ||
    i?.security?.is_tor === true;

  if (block) return { error: "We could not create your account." };

  const review =
    e?.email_risk?.address_risk_status === "high" ||
    p?.phone_validation?.is_voip === true ||
    i?.security?.is_vpn === true ||
    i?.security?.is_proxy === true;

  // Create the account here with your auth provider. Store `review` so you can
  // hold the account, ask for extra verification, or limit it until reviewed.
  return { ok: true, review };
}