Email Verification for Healthcare Applications

import Mailbeam from "@mailbeam/sdk";

const mb = new Mailbeam({ apiKey: process.env.MAILBEAM_KEY! });

/**
 * Verify a patient email address for portal registration.
 * GDPR note: raw email is not logged — only verification outcome.
 */
export async function verifyPatientEmail(
  email: string,
  patientRef: string, // your internal ID, not email
  gdprConsent: { given: boolean; timestamp: string }
): Promise<{ valid: boolean; error?: string }> {
  if (!gdprConsent.given) {
    throw new Error("GDPR consent must be obtained before email verification.");
  }

  const result = await mb.verify(email);

  // Audit log: outcome only, no PII
  await auditLog.append({
    event: "patient_email_verification",
    patientRef,          // your internal ID
    outcome: result.status,
    consentTimestamp: gdprConsent.timestamp,
    verifiedAt: new Date().toISOString(),
    // Email address intentionally omitted from log
  });

  if (!result.valid) {
    return {
      valid: false,
      error: result.suggestion
        ? `Email not found. Did you mean ${result.suggestion}?`
        : "Please provide a valid email address.",
    };
  }

  return { valid: true };
}