Bind any sensitive action — login, payment, transfer, profile change — to a transaction-scoped access token. Pick your stack and ship.
Browser apps that call advice() from React/Angular/Vue components and pass the bearer to a backend that runs verify().
Server-rendered or full-stack apps. Run advice() on the client, verify() on the server, all in one codebase or split across services.
Native mobile clients that call advice() from a tap handler and ship the bearer to your backend over HTTPS.
Standalone APIs that only verify transaction-scoped tokens — pair these with any of the SPA or mobile frontends.