Authentication before visibility

import { LayerV } from '@layerv/sdk';

const client = new LayerV();  // Uses AUTH0 token from env

// After Okta/Azure AD callback succeeds:
app.post('/auth/callback', async (req, res) => {
  const user = await verifyIdpToken(req.body.token);

  // Mint a QURL — resource becomes reachable
  const { data } = await client.qurl.create({
    target_url: 'https://admin.yourapp.com/dashboard',
    expires_in: '1h',
    one_time_use: true,
    access_policy: {
      geo_allowlist: ['US', 'CA']
    },
    description: `Session for ${user.email}`
  });

  // Redirect user through the access link
  res.redirect(data.qurl_link);
});

import layerv
from flask import redirect, request

client = layerv.Client()  # Uses AUTH0 token from env

# After IdP authentication callback:
@app.route("/auth/callback", methods=["POST"])
def auth_callback():
    user = verify_idp_token(request.form["token"])

    # Mint a QURL — resource materializes
    resp = client.qurl.create(
        target_url="https://admin.yourapp.com/dashboard",
        expires_in="1h",
        one_time_use=True,
        access_policy={"geo_allowlist": ["US", "CA"]},
        description=f"Session for {user.email}"
    )

    # Redirect through the access link
    return redirect(resp.data.qurl_link)