The account is new.The machine is on file.

import { useTrustSig } from "@trustsig/react";

const { getResponse } = useTrustSig();
const { token } = await getResponse();

import { TrustSig, hasReasonGroup } from '@trustsig/server';

const ts = new TrustSig({ secretKey: process.env.TRUSTSIG_SECRET_KEY });

app.post('/signup', async (req, res) => {
  const token = req.headers['x-trustsig-response'];
  const result = await ts.verifyRemote(token);

  // is_bot is true once the session crossed the block threshold.
  if (result.is_bot) {
    return res.status(403).json({ error: 'Access denied.' });
  }

  if (await bannedDevices.has(result.identity.device_id)) {
    return res.status(403).json({ error: 'Access denied.' });
  }

  // Your table, keyed on the device id. TrustSig supplies the key and the
  // sighting counts; how many accounts sit behind one machine is yours.
  const prior = await accountsForDevice(result.identity.device_id);

  if (prior.length >= 3 || hasReasonGroup(result, 'velocity')) {
    return queueForReview(req, res, {
      device_id: result.identity.device_id,
      accounts: prior.length,
    });
  }

  return completeSignup(req, res, {
    device_id: result.identity.device_id,
    trial: prior.length === 0 ? 'full' : 'none',
  });
});