Identify the device.Get the verdict in the same call.

import { useTrustSig } from "@trustsig/react";

const { getResponse } = useTrustSig();
const { token } = await getResponse();

import { TrustSig } from '@trustsig/server';

const ts = new TrustSig({ secretKey: process.env.TRUSTSIG_SECRET_KEY });

app.post('/login', async (req, res) => {
  const token = req.headers['x-trustsig-response'];
  const { action, identity } = await ts.verifyRemote(token);

  // Fail closed: proceed only on an explicit ALLOW.
  if (action !== 'ALLOW') {
    return res.status(403).json({ error: 'Access denied.' });
  }

  // degraded marks an id a large cohort shares, so it names a crowd.
  if (identity.degraded) {
    return completeLogin(req, res);
  }

  // Your table, keyed on the id the verdict carries.
  await devices.bind(req.body.email, identity.device_id, {
    first_seen: identity.first_seen,
    sightings: identity.sightings,
  });

  return completeLogin(req, res);
});