Two-factor sign-in in two API calls

# 1. Send the code. We generate it and keep only a hash.
curl -X POST https://packetexchange.io/api/v1/verify/start \
  -H "Authorization: Bearer $PACKETEXCHANGE_API_KEY" \
  -H "Content-Type: application/json" \
  -H "X-Idempotency-Key: $(uuidgen)" \
  -d '{
    "to": "+14155550100",
    "channel": "voice",
    "from": "+14155550199",
    "language": "es"
  }'

# 2. Check what the user typed.
curl -X POST https://packetexchange.io/api/v1/verify/check \
  -H "Authorization: Bearer $PACKETEXCHANGE_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{ "verificationId": "<from step 1>", "code": "482913" }'

import { randomUUID } from 'node:crypto';

const px = (path, body, headers = {}) =>
  fetch(`https://packetexchange.io/api/v1${path}`, {
    method: 'POST',
    headers: {
      Authorization: `Bearer ${process.env.PACKETEXCHANGE_API_KEY}`,
      'Content-Type': 'application/json',
      ...headers,
    },
    body: JSON.stringify(body),
  }).then((r) => r.json());

// 1. Send the code. We generate it and keep only a hash.
const start = await px(
  '/verify/start',
  { to: '+14155550100', channel: 'voice', from: '+14155550199', language: 'es' },
  { 'X-Idempotency-Key': randomUUID() },
);

// 2. Check what the user typed: approved, denied, expired or max_attempts.
const check = await px('/verify/check', {
  verificationId: start.data.verificationId,
  code: userInput, // the digits your user typed
});
console.log(check.data.status);

import os, uuid
import httpx

px = httpx.Client(
    base_url="https://packetexchange.io/api/v1",
    headers={"Authorization": f"Bearer {os.environ['PACKETEXCHANGE_API_KEY']}"},
)

# 1. Send the code. We generate it and keep only a hash.
start = px.post(
    "/verify/start",
    json={"to": "+14155550100", "channel": "voice", "from": "+14155550199", "language": "es"},
    headers={"X-Idempotency-Key": str(uuid.uuid4())},
).json()["data"]

# 2. Check what the user typed: approved, denied, expired or max_attempts.
check = px.post(
    "/verify/check",
    json={"verificationId": start["verificationId"], "code": user_input},  # what they typed
).json()["data"]
print(check["status"])