v1.2 · token verifier

Verify a Lifecheck token in the browser

This calls the lifecheck-verify Edge Function, which holds your secret server-side and returns a CORS-enabled verdict — so a static page can verify without a backend and without leaking the secret. See the docs.

1 Pass the check to mint a token

Enter a site key, load the widget, and pass it. A real lc_site_ key (registered on the API-keys page) mints a server token you can truly verify; a demo key mints a local token that will come back invalid-input-token — still a clean test of the endpoint + CORS.

Site key

2 Verify the token

Sends { sitekey, token } to the function. Watch for a CORS/network failure vs a real JSON verdict.

Function URL Token

Not deployed yet? Run supabase functions deploy lifecheck-verify (config already sets verify_jwt=false), then reload this page.