Email Verification for Travel Booking Confirmations

import { NextRequest, NextResponse } from "next/server";

const MAILBEAM_KEY = process.env.MAILBEAM_KEY!;

async function verifyEmail(email: string) {
  const res = await fetch("https://api.mailbeam.dev/v1/verify", {
    method: "POST",
    headers: {
      "Authorization": `Bearer ${MAILBEAM_KEY}`,
      "Content-Type": "application/json",
    },
    body: JSON.stringify({ email }),
  });
  return res.json() as Promise<{
    valid: boolean;
    disposable: boolean;
    score: number;
    suggestion: string | null;
  }>;
}

export async function POST(req: NextRequest) {
  const { email, passengers, itinerary, paymentToken } = await req.json();

  // Verify BEFORE we take payment and issue the e-ticket
  const check = await verifyEmail(email);

  if (!check.valid) {
    return NextResponse.json(
      {
        field: "email",
        error: "We couldn't reach this email. Please confirm it so we can send your e-ticket and check-in details.",
        suggestion: check.suggestion,
      },
      { status: 422 }
    );
  }

  const booking = await bookings.create({
    email,
    passengers,
    itinerary,
    paymentToken,
    emailScore: check.score,
  });

  // The address is validated, so the confirmation — and every later
  // gate-change or check-in alert — rides on a channel we trust.
  await bookings.sendConfirmation(booking);
  return NextResponse.json({ bookingRef: booking.ref });
}