From 931bf10f65b7b4b3c6ab15a20fcac5ddaef53ceb Mon Sep 17 00:00:00 2001
From: Josh Authy <jstaples@twilio.com>
Date: Tue, 24 Jan 2017 11:11:56 -0800
Subject: [PATCH 01/12] Update users.js

Editing phone verification response
---
 server/controllers/users.js | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/server/controllers/users.js b/server/controllers/users.js
index 61ba7d1..c573001 100644
--- a/server/controllers/users.js
+++ b/server/controllers/users.js
@@ -410,7 +410,7 @@ exports.verifyPhoneToken = function (req, res) {
                 if (response.success) {
                     req.session.ph_verified = true;
                 }
-                res.status(200).json(err);
+                res.status(200).json(response);
             }
 
         });
@@ -437,4 +437,4 @@ function createSession(req, res, user) {
         req.session.ph_verified = false;
         res.status(200).json();
     });
-}
\ No newline at end of file
+}

From 920bf0051b9a0ea882c36268dff6effdeb0251b3 Mon Sep 17 00:00:00 2001
From: Michael Kurrels <mjkurrels@gmail.com>
Date: Sat, 25 Mar 2017 12:13:03 -0700
Subject: [PATCH 02/12] updates jquery version

---
 public/index.html | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/public/index.html b/public/index.html
index 87abcd6..0dfe04f 100644
--- a/public/index.html
+++ b/public/index.html
@@ -11,7 +11,7 @@
     <link rel="stylesheet" href="https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap-theme.min.css"
           integrity="sha384-rHyoN1iRsVXV4nD0JutlnGaslCJuC7uwjduW9SVrLvRYooPp2bWYgmgJQIXwl/Sp" crossorigin="anonymous">
 
-    <script src="https://cdnjs.cloudflare.com/ajax/libs/jquery/2.2.4/jquery.min.js"></script>
+    <script src="https://cdnjs.cloudflare.com/ajax/libs/jquery/3.2.1/jquery.min.js"></script>
 
     <script src="https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/js/bootstrap.min.js"
             integrity="sha384-Tc5IQib027qvyjSMfHjOMaLkfuWVxZxUPnCJA7l2mCWNIpG9mGCD8wGNIcPD7Txa"

From 3724f99c73fa0eccadad5adb6adde9cfa1967581 Mon Sep 17 00:00:00 2001
From: Michael Kurrels <mjkurrels@gmail.com>
Date: Sat, 25 Mar 2017 17:30:45 -0700
Subject: [PATCH 03/12] updates version of jquery

---
 public/login/index.html        | 3 +--
 public/protected/index.html    | 2 +-
 public/register/index.html     | 2 +-
 public/verification/index.html | 2 +-
 public/verified/index.html     | 2 +-
 5 files changed, 5 insertions(+), 6 deletions(-)

diff --git a/public/login/index.html b/public/login/index.html
index c1cdd24..da0feb1 100644
--- a/public/login/index.html
+++ b/public/login/index.html
@@ -11,8 +11,7 @@
     <link rel="stylesheet" href="https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap-theme.min.css"
           integrity="sha384-rHyoN1iRsVXV4nD0JutlnGaslCJuC7uwjduW9SVrLvRYooPp2bWYgmgJQIXwl/Sp" crossorigin="anonymous">
 
-    <script src="https://cdnjs.cloudflare.com/ajax/libs/jquery/2.2.4/jquery.min.js"></script>
-
+    <script src="https://cdnjs.cloudflare.com/ajax/libs/jquery/3.2.1/jquery.min.js"></script>
     <script src="https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/js/bootstrap.min.js"
             integrity="sha384-Tc5IQib027qvyjSMfHjOMaLkfuWVxZxUPnCJA7l2mCWNIpG9mGCD8wGNIcPD7Txa"
             crossorigin="anonymous"></script>
diff --git a/public/protected/index.html b/public/protected/index.html
index edba4ed..db3aa2e 100644
--- a/public/protected/index.html
+++ b/public/protected/index.html
@@ -11,7 +11,7 @@
     <link rel="stylesheet" href="https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap-theme.min.css"
           integrity="sha384-rHyoN1iRsVXV4nD0JutlnGaslCJuC7uwjduW9SVrLvRYooPp2bWYgmgJQIXwl/Sp" crossorigin="anonymous">
 
-    <script src="https://cdnjs.cloudflare.com/ajax/libs/jquery/2.2.4/jquery.min.js"></script>
+    <script src="https://cdnjs.cloudflare.com/ajax/libs/jquery/3.2.1/jquery.min.js"></script>
 
     <script src="https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/js/bootstrap.min.js"
             integrity="sha384-Tc5IQib027qvyjSMfHjOMaLkfuWVxZxUPnCJA7l2mCWNIpG9mGCD8wGNIcPD7Txa"
diff --git a/public/register/index.html b/public/register/index.html
index 781bcf9..56b0e74 100644
--- a/public/register/index.html
+++ b/public/register/index.html
@@ -11,7 +11,7 @@
     <link rel="stylesheet" href="https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap-theme.min.css"
           integrity="sha384-rHyoN1iRsVXV4nD0JutlnGaslCJuC7uwjduW9SVrLvRYooPp2bWYgmgJQIXwl/Sp" crossorigin="anonymous">
 
-    <script src="https://cdnjs.cloudflare.com/ajax/libs/jquery/2.2.4/jquery.min.js"></script>
+    <script src="https://cdnjs.cloudflare.com/ajax/libs/jquery/3.2.1/jquery.min.js"></script>
 
     <script src="https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/js/bootstrap.min.js"
             integrity="sha384-Tc5IQib027qvyjSMfHjOMaLkfuWVxZxUPnCJA7l2mCWNIpG9mGCD8wGNIcPD7Txa"
diff --git a/public/verification/index.html b/public/verification/index.html
index 66a6626..d468a12 100644
--- a/public/verification/index.html
+++ b/public/verification/index.html
@@ -11,7 +11,7 @@
     <link rel="stylesheet" href="https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap-theme.min.css"
           integrity="sha384-rHyoN1iRsVXV4nD0JutlnGaslCJuC7uwjduW9SVrLvRYooPp2bWYgmgJQIXwl/Sp" crossorigin="anonymous">
 
-    <script src="https://cdnjs.cloudflare.com/ajax/libs/jquery/2.2.4/jquery.min.js"></script>
+    <script src="https://cdnjs.cloudflare.com/ajax/libs/jquery/3.2.1/jquery.min.js"></script>
 
     <script src="https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/js/bootstrap.min.js"
             integrity="sha384-Tc5IQib027qvyjSMfHjOMaLkfuWVxZxUPnCJA7l2mCWNIpG9mGCD8wGNIcPD7Txa"
diff --git a/public/verified/index.html b/public/verified/index.html
index b68c481..8dcfcc3 100644
--- a/public/verified/index.html
+++ b/public/verified/index.html
@@ -11,7 +11,7 @@
     <link rel="stylesheet" href="https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap-theme.min.css"
           integrity="sha384-rHyoN1iRsVXV4nD0JutlnGaslCJuC7uwjduW9SVrLvRYooPp2bWYgmgJQIXwl/Sp" crossorigin="anonymous">
 
-    <script src="https://cdnjs.cloudflare.com/ajax/libs/jquery/2.2.4/jquery.min.js"></script>
+    <script src="https://cdnjs.cloudflare.com/ajax/libs/jquery/3.2.1/jquery.min.js"></script>
 
     <script src="https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/js/bootstrap.min.js"
             integrity="sha384-Tc5IQib027qvyjSMfHjOMaLkfuWVxZxUPnCJA7l2mCWNIpG9mGCD8wGNIcPD7Txa"

From e0293ff02485dfb2a82f62335b85bc962af13c8d Mon Sep 17 00:00:00 2001
From: Michael Kurrels <mjkurrels@gmail.com>
Date: Sat, 25 Mar 2017 17:33:20 -0700
Subject: [PATCH 04/12] changes jquery version for 2fa

---
 public/2fa/index.html | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/public/2fa/index.html b/public/2fa/index.html
index 259db4c..7898711 100644
--- a/public/2fa/index.html
+++ b/public/2fa/index.html
@@ -10,7 +10,7 @@
     <link rel="stylesheet" href="https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap-theme.min.css"
           integrity="sha384-rHyoN1iRsVXV4nD0JutlnGaslCJuC7uwjduW9SVrLvRYooPp2bWYgmgJQIXwl/Sp" crossorigin="anonymous">
 
-    <script src="https://cdnjs.cloudflare.com/ajax/libs/jquery/2.2.4/jquery.min.js"></script>
+    <script src="https://cdnjs.cloudflare.com/ajax/libs/jquery/3.2.1/jquery.min.js"></script>
 
     <script src="https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/js/bootstrap.min.js"
             integrity="sha384-Tc5IQib027qvyjSMfHjOMaLkfuWVxZxUPnCJA7l2mCWNIpG9mGCD8wGNIcPD7Txa"

From 6c929d6a0f8a299fb821539500701c648c21d588 Mon Sep 17 00:00:00 2001
From: Josh <josh@twilio.com>
Date: Mon, 3 Apr 2017 10:09:46 -0700
Subject: [PATCH 05/12] Adding reset post phone verification.

---
 public/app.js               | 4 ++++
 server/controllers/users.js | 4 ++--
 2 files changed, 6 insertions(+), 2 deletions(-)

diff --git a/public/app.js b/public/app.js
index aaf8bf7..99284ec 100644
--- a/public/app.js
+++ b/public/app.js
@@ -182,5 +182,9 @@ app.controller('PhoneVerificationController', function ($scope, $http, $window,
                 alert("Error verifying the token.  Check console for details.");
             });
     };
+
+    $scope.logout = function () {
+            $window.location.href = $window.location.origin;
+    };
 });
 
diff --git a/server/controllers/users.js b/server/controllers/users.js
index c573001..61ba7d1 100644
--- a/server/controllers/users.js
+++ b/server/controllers/users.js
@@ -410,7 +410,7 @@ exports.verifyPhoneToken = function (req, res) {
                 if (response.success) {
                     req.session.ph_verified = true;
                 }
-                res.status(200).json(response);
+                res.status(200).json(err);
             }
 
         });
@@ -437,4 +437,4 @@ function createSession(req, res, user) {
         req.session.ph_verified = false;
         res.status(200).json();
     });
-}
+}
\ No newline at end of file

From f3323108b18f6c100a9b9f53abbee2a027f3c697 Mon Sep 17 00:00:00 2001
From: Josh <josh@twilio.com>
Date: Tue, 4 Apr 2017 16:30:02 -0700
Subject: [PATCH 06/12] Removing unused packages.  Updating authy-client.

---
 index.js     | 2 --
 package.json | 6 ++----
 2 files changed, 2 insertions(+), 6 deletions(-)

diff --git a/index.js b/index.js
index 9d03603..1b4b113 100644
--- a/index.js
+++ b/index.js
@@ -11,8 +11,6 @@ var config = require('./server/config.js');
 
 var app = express();
 var server = require('http').Server(app);
-var io = require('socket.io')(server);
-
 
 if(!config.API_KEY){
     console.log("Please set your DEMO_AUTHY_API_KEY environment variable before proceeding.");
diff --git a/package.json b/package.json
index 44c53c8..173c9e0 100644
--- a/package.json
+++ b/package.json
@@ -19,7 +19,7 @@
   "author": "Josh Staples",
   "license": "ISC",
   "dependencies": {
-    "authy-client": "^1.0.7",
+    "authy-client": "^1.0.10",
     "body-parser": "^1.15.2",
     "connect-mongo": "^1.3.2",
     "cookie-parser": "^1.4.3",
@@ -30,8 +30,6 @@
     "mongoose": "^4.6.5",
     "nodemon": "^1.11.0",
     "qs": "^6.3.0",
-    "request": "^2.76.0",
-    "socket-io": "0.0.0",
-    "socket.io": "^1.5.1"
+    "request": "^2.76.0"
   }
 }

From cae065ca7995c7f14de209aa0d3caa2ee0c26093 Mon Sep 17 00:00:00 2001
From: Josh <josh@twilio.com>
Date: Tue, 4 Apr 2017 16:50:46 -0700
Subject: [PATCH 07/12] adding check for invalid reg info.

---
 public/app.js | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/public/app.js b/public/app.js
index 99284ec..bff9b33 100644
--- a/public/app.js
+++ b/public/app.js
@@ -23,7 +23,7 @@ app.controller('RegistrationController', function ($scope, $http, $window) {
     $scope.setup = {};
 
     $scope.register = function () {
-        if ($scope.password1 === $scope.password2) {
+        if ($scope.password1 === $scope.password2 && $scope.password1 !== "") {
 
             // making sure the passwords are the same and setting it on the
             // object we'll pass to the registration endpoint.

From 4dd2795739af8ca9c88e308fae137de1a436f084 Mon Sep 17 00:00:00 2001
From: Josh <josh@twilio.com>
Date: Mon, 20 Nov 2017 12:39:16 -0800
Subject: [PATCH 08/12] - Removing problematic npm package `authy-client`. -
 Adding npm package `authy`

---
 package.json                     |   5 +-
 public/app.js                    |   2 +-
 server/controllers/users.js      | 102 ++++++++++++++----------------
 server/lib/phone_verification.js | 103 -------------------------------
 4 files changed, 48 insertions(+), 164 deletions(-)
 delete mode 100644 server/lib/phone_verification.js

diff --git a/package.json b/package.json
index 173c9e0..c98d541 100644
--- a/package.json
+++ b/package.json
@@ -19,7 +19,7 @@
   "author": "Josh Staples",
   "license": "ISC",
   "dependencies": {
-    "authy-client": "^1.0.10",
+    "authy": "^1.3.0",
     "body-parser": "^1.15.2",
     "connect-mongo": "^1.3.2",
     "cookie-parser": "^1.4.3",
@@ -29,7 +29,6 @@
     "mongodb": "^2.2.11",
     "mongoose": "^4.6.5",
     "nodemon": "^1.11.0",
-    "qs": "^6.3.0",
-    "request": "^2.76.0"
+    "qs": "^6.3.0"
   }
 }
diff --git a/public/app.js b/public/app.js
index bff9b33..330cbef 100644
--- a/public/app.js
+++ b/public/app.js
@@ -129,7 +129,7 @@ app.controller('AuthyController', function ($scope, $http, $window, $interval) {
         $http.post('/api/authy/onetouchstatus')
             .success(function (data, status, headers, config) {
                 console.log("OneTouch Status: ", data);
-                if (data.body.approval_request.status === "approved") {
+                if (data.approval_request.status === "approved") {
                     $window.location.href = $window.location.origin + "/protected";
                     $interval.cancel(pollingID);
                 } else {
diff --git a/server/controllers/users.js b/server/controllers/users.js
index 61ba7d1..d55135c 100644
--- a/server/controllers/users.js
+++ b/server/controllers/users.js
@@ -3,15 +3,11 @@ var mongoose = require('mongoose');
 var User = mongoose.model('User');
 var config = require('../config.js');
 var qs = require('qs');
-var request = require('request');
-var phoneReg = require('../lib/phone_verification')(config.API_KEY);
 
-// https://github.com/seegno/authy-client
-const Client = require('authy-client').Client;
-const authy = new Client({key: config.API_KEY});
+const authy = require('authy')(config.API_KEY);
 
 
-function hashPW(pwd) {
+function hashPW (pwd) {
     return crypto.createHash('sha256').update(pwd).digest('base64').toString();
 }
 
@@ -101,30 +97,27 @@ exports.register = function (req, res) {
                 res.status(500).json(err);
             } else {
 
-                authy.registerUser({
-                    countryCode: req.body.country_code,
-                    email: req.body.email,
-                    phone: req.body.phone_number
-                }, function (err, regRes) {
-                    if (err) {
-                        console.log('Error Registering User with Authy');
-                        res.status(500).json(err);
-                        return;
-                    }
-
-                    user.set('authyId', regRes.user.id);
-
-                    // Save the AuthyID into the database then request an SMS
-                    user.save(function (err) {
+                authy.register_user(req.body.email, req.body.phone_number, req.body.country_code,
+                    function (err, regRes) {
                         if (err) {
-                            console.log('error saving user in authyId registration ', err);
-                            res.session.error = err;
+                            console.log('Error Registering User with Authy');
                             res.status(500).json(err);
-                        } else {
-                            createSession(req, res, user);
+                            return;
                         }
+
+                        user.set('authyId', regRes.user.id);
+
+                        // Save the AuthyID into the database then request an SMS
+                        user.save(function (err) {
+                            if (err) {
+                                console.log('error saving user in authyId registration ', err);
+                                res.session.error = err;
+                                res.status(500).json(err);
+                            } else {
+                                createSession(req, res, user);
+                            }
+                        });
                     });
-                });
             }
         });
     });
@@ -170,7 +163,7 @@ exports.sms = function (req, res) {
          *
          * Passing force: true forces an SMS send.
          */
-        authy.requestSms({authyId: user.authyId}, {force: true}, function (err, smsRes) {
+        authy.request_sms(user.authyId, true, function (err, smsRes) {
             if (err) {
                 console.log('ERROR requestSms', err);
                 res.status(500).json(err);
@@ -179,7 +172,6 @@ exports.sms = function (req, res) {
             console.log("requestSMS response: ", smsRes);
             res.status(200).json(smsRes);
         });
-
     });
 };
 
@@ -205,7 +197,7 @@ exports.voice = function (req, res) {
          *
          * Passing force: true forces an voice call to be made
          */
-        authy.requestCall({authyId: user.authyId}, {force: true}, function (err, callRes) {
+        authy.request_call(user.authyId, true, function (err, callRes) {
             if (err) {
                 console.error('ERROR requestcall', err);
                 res.status(500).json(err);
@@ -218,7 +210,7 @@ exports.voice = function (req, res) {
 };
 
 /**
- * Verify an Authy Token
+ * Verify an Authy Code
  *
  * @param req
  * @param res
@@ -231,7 +223,9 @@ exports.verify = function (req, res) {
             console.error('Verify Token User Error: ', err);
             res.status(500).json(err);
         }
-        authy.verifyToken({authyId: user.authyId, token: req.body.token}, function (err, tokenRes) {
+
+
+        authy.verify(user.authyId, req.body.token, function (err, tokenRes) {
             if (err) {
                 console.log("Verify Token Error: ", err);
                 res.status(500).json(err);
@@ -247,7 +241,7 @@ exports.verify = function (req, res) {
 };
 
 /**
- * Create a OneTouch request.
+ * Create a Push Notification request.
  * The front-end client will poll 12 times at a frequency of 5 seconds before terminating.
  * If the status is changed to approved, it quit polling and process the user.
  *
@@ -264,23 +258,9 @@ exports.createonetouch = function (req, res) {
             res.status(500).json(err);
         }
 
-        var request = {
-            authyId: user.authyId,
-            details: {
-                hidden: {
-                    "test": "This is a"
-                },
-                visible: {
-                    "Authy ID": user.authyId,
-                    "Username": user.username,
-                    "Location": 'San Francisco, CA',
-                    "Reason": 'Demo by Authy'
-                }
-            },
-            message: 'Login requested for an Authy Demo account.'
-        };
+        var user_payload = {'message': 'Customize this push notification with your messaging'};
 
-        authy.createApprovalRequest(request, {ttl: 120}, function (oneTouchErr, oneTouchRes) {
+        authy.send_approval_request(user.authyId, user_payload, {}, null, function (oneTouchErr, oneTouchRes) {
             if (oneTouchErr) {
                 console.error("Create OneTouch Error: ", oneTouchErr);
                 res.status(500).json(oneTouchErr);
@@ -290,7 +270,6 @@ exports.createonetouch = function (req, res) {
             req.session.uuid = oneTouchRes.approval_request.uuid;
             res.status(200).json(oneTouchRes)
         });
-
     });
 };
 
@@ -303,7 +282,7 @@ exports.createonetouch = function (req, res) {
  * @param req
  * @return {Boolean}
  */
-function verifyCallback(req) {
+function verifyCallback (req) {
 
     var apiKey = config.API_KEY;
 
@@ -346,13 +325,13 @@ exports.checkonetouchstatus = function (req, res) {
         strictSSL: true
     };
 
-    request.get(options, function (err, response) {
+    authy.check_approval_status(req.session.uuid, function (err, response) {
         if (err) {
             console.log("OneTouch Status Request Error: ", err);
             res.status(500).json(err);
         }
         console.log("OneTouch Status Response: ", response);
-        if (response.body.approval_request.status === "approved") {
+        if (response.approval_request.status === "approved") {
             req.session.authy = true;
         }
         res.status(200).json(response);
@@ -372,8 +351,17 @@ exports.requestPhoneVerification = function (req, res) {
 
     console.log("body: ", req.body);
 
+    var info = {
+        via: 'sms'
+        //, locale: 'es',
+        //, custom_message: 'Here is your custom message {{code}}',
+        //, custom_code: '0051243'
+    };
+
+
     if (phone_number && country_code && via) {
-        phoneReg.requestPhoneVerification(phone_number, country_code, via, function (err, response) {
+
+        authy.phones().verification_start(phone_number, country_code, info, function (err, response) {
             if (err) {
                 console.log('error creating phone reg request', err);
                 res.status(500).json(err);
@@ -399,9 +387,10 @@ exports.verifyPhoneToken = function (req, res) {
     var country_code = req.body.country_code;
     var phone_number = req.body.phone_number;
     var token = req.body.token;
-    
+
     if (phone_number && country_code && token) {
-        phoneReg.verifyPhoneToken(phone_number, country_code, token, function (err, response) {
+
+        authy.phones().verification_check(phone_number, country_code, token, function (err, response) {
             if (err) {
                 console.log('error creating phone reg request', err);
                 res.status(500).json(err);
@@ -412,7 +401,6 @@ exports.verifyPhoneToken = function (req, res) {
                 }
                 res.status(200).json(err);
             }
-
         });
     } else {
         console.log('Failed in Confirm Phone request body: ', req.body);
@@ -427,7 +415,7 @@ exports.verifyPhoneToken = function (req, res) {
  * @param res
  * @param user
  */
-function createSession(req, res, user) {
+function createSession (req, res, user) {
     req.session.regenerate(function () {
         req.session.loggedIn = true;
         req.session.user = user.id;
diff --git a/server/lib/phone_verification.js b/server/lib/phone_verification.js
deleted file mode 100644
index 7d344e1..0000000
--- a/server/lib/phone_verification.js
+++ /dev/null
@@ -1,103 +0,0 @@
-var request = require('request');
-var VERSION = "0.1";
-
-
-module.exports = function (apiKey, apiUrl) {
-    return new PhoneVerification(apiKey, apiUrl);
-};
-
-function PhoneVerification(apiKey, apiUrl) {
-    this.apiKey = apiKey;
-    this.apiURL = apiUrl || "https://api.authy.com";
-    this.user_agent = "PhoneVerificationRegNode/" + VERSION + " (node " + process.version + ")";
-    this.headers = {};
-
-    this.init();
-}
-
-PhoneVerification.prototype.init = function () {
-    this.headers = {
-        "User-Agent": this.user_agent
-    };
-};
-
-/**
- * Verify a phone number
- *
- * @param {!string} phone_number
- * @param {!string} country_code
- * @param {!string} token
- * @param {!function} callback
- */
-PhoneVerification.prototype.verifyPhoneToken = function (phone_number, country_code, token, callback) {
-
-    console.log('in verify phone');
-    this._request("get", "/protected/json/phones/verification/check", {
-            "api_key": this.apiKey,
-            "verification_code": token,
-            "phone_number": phone_number,
-            "country_code": country_code
-        },
-        callback
-    );
-};
-
-/**
- * Request a phone verification
- *
- * @param {!string} phone_number
- * @param {!string} country_code
- * @param {!string} via
- * @param {!function} callback
- */
-PhoneVerification.prototype.requestPhoneVerification = function (phone_number, country_code, via, callback) {
-
-    this._request("post", "/protected/json/phones/verification/start", {
-            "api_key": this.apiKey,
-            "phone_number": phone_number,
-            "via": via,
-            "country_code": country_code,
-            "code_length": 4
-        },
-        callback
-    );
-};
-
-PhoneVerification.prototype._request = function (type, path, params, callback, qs) {
-    qs = qs || {};
-    qs['api_key'] = this.apiKey;
-
-    options = {
-        url: this.apiURL + path,
-        form: params,
-        headers: this.headers,
-        qs: qs,
-        json: true,
-        jar: false,
-        strictSSL: true
-    };
-
-    console.log(options.url);
-
-    var callback_check = function (err, res, body) {
-        if (!err) {
-            if (res.statusCode === 200) {
-                callback(null, body);
-            } else {
-                callback(body);
-            }
-        } else {
-            callback(err);
-        }
-    };
-
-    switch (type) {
-        case "post":
-            request.post(options, callback_check);
-            break;
-
-        case "get":
-            request.get(options, callback_check);
-            break;
-    }
-};

From 09c10801432419c9f1d18bfda6af034c874f020b Mon Sep 17 00:00:00 2001
From: Josh <josh@twilio.com>
Date: Wed, 10 Jan 2018 13:17:46 -0800
Subject: [PATCH 09/12] Upgrading mongoose connection. Upgrading mongoose
 version. Removing duplicate login function.

Updating code for MongoDB 3.6.
---
 README.md                   |  2 +
 index.js                    | 32 ++++++++------
 package.json                |  7 +--
 server/controllers/users.js | 88 ++++++++++++++++---------------------
 server/model/user_model.js  |  4 +-
 5 files changed, 63 insertions(+), 70 deletions(-)

diff --git a/README.md b/README.md
index 627629b..8face33 100644
--- a/README.md
+++ b/README.md
@@ -16,6 +16,8 @@ This app uses MongoDB as a data store.  You may have to install that as well and
 - SMS or Voice Call
 
 ### Setup
+- NOTE:  This demo works for MongoDB v3.6+
+  - If you're having issues, its probably related to the above. 
 - Clone this repo
 - Run `npm install`
 - Register for a [Twilio Account](https://www.twilio.com/).
diff --git a/index.js b/index.js
index 1b4b113..3eabc02 100644
--- a/index.js
+++ b/index.js
@@ -1,16 +1,16 @@
 require('./server/model/user_model.js');
 
-var express = require('express');
-var cookieParser = require('cookie-parser');
-var bodyParser = require('body-parser');
-var expressSession = require('express-session');
-var mongoStore = require('connect-mongo')({session: expressSession});
-var mongoose = require('mongoose');
+const express = require('express');
+const cookieParser = require('cookie-parser');
+const bodyParser = require('body-parser');
+const expressSession = require('express-session');
+const mongoStore = require('connect-mongo')({session: expressSession});
+const mongoose = require('mongoose');
 
-var config = require('./server/config.js');
+const config = require('./server/config.js');
 
-var app = express();
-var server = require('http').Server(app);
+const app = express();
+const server = require('http').Server(app);
 
 if(!config.API_KEY){
     console.log("Please set your DEMO_AUTHY_API_KEY environment variable before proceeding.");
@@ -21,8 +21,12 @@ if(!config.API_KEY){
 /**
  * Setup MongoDB connection.
  */
-mongoose.connect('mongodb://localhost:27017/authydemo');
-var db = mongoose.connection;
+mongoose.connect('mongodb://localhost:27017/authydemo').then(function(){
+  console.log(" Connected to Authy Demo ");
+}).catch(err => console.error(err));
+
+
+const db = mongoose.connection;
 
 app.use(cookieParser());
 app.use(expressSession({'secret': config.SECRET}));
@@ -48,16 +52,16 @@ db.once('open', function (err) {
             collection: 'sessions'
         })
     }));
-    var port = config.PORT || 5151;
+    const port = config.PORT || 5151;
     server.listen(port);
     console.log("Magic happening on port " + port);
 });
 
 db.on('error', console.error.bind(console, 'Connection Error:'));
 
-var router = express.Router();
+const router = express.Router();
 
-var users = require('./server/controllers/users.js');
+const users = require('./server/controllers/users.js');
 
 router.route('/user/register').post(users.register);
 
diff --git a/package.json b/package.json
index c98d541..0130dbc 100644
--- a/package.json
+++ b/package.json
@@ -4,7 +4,8 @@
   "description": "Simple demo showing how Authy works.",
   "main": "index.js",
   "scripts": {
-    "test": "echo \"Error: no test specified\" && exit 1"
+    "test": "echo \"Error: no test specified\" && exit 1",
+    "start": "node index.js"
   },
   "repository": {
     "type": "git",
@@ -26,8 +27,8 @@
     "crypto": "0.0.3",
     "express": "^4.14.0",
     "express-session": "^1.14.1",
-    "mongodb": "^2.2.11",
-    "mongoose": "^4.6.5",
+    "mongodb": "^3.0.2",
+    "mongoose": "^5.0.2",
     "nodemon": "^1.11.0",
     "qs": "^6.3.0"
   }
diff --git a/server/controllers/users.js b/server/controllers/users.js
index d55135c..35b62b3 100644
--- a/server/controllers/users.js
+++ b/server/controllers/users.js
@@ -1,8 +1,8 @@
-var crypto = require('crypto');
-var mongoose = require('mongoose');
-var User = mongoose.model('User');
-var config = require('../config.js');
-var qs = require('qs');
+const crypto = require('crypto');
+const mongoose = require('mongoose');
+const User = mongoose.model('User');
+const config = require('../config.js');
+const qs = require('qs');
 
 const authy = require('authy')(config.API_KEY);
 
@@ -50,22 +50,25 @@ exports.logout = function (req, res) {
     });
 };
 
+
 /**
- * Checks to see if the user is logged in and redirects appropriately
+ * Check user login status.  Redirect appropriately.
  *
  * @param req
  * @param res
  */
 exports.loggedIn = function (req, res) {
+
     if (req.session.loggedIn && req.session.authy) {
         res.status(200).json({url: "/protected"});
     } else if (req.session.loggedIn && !req.session.authy) {
         res.status(200).json({url: "/2fa"});
     } else {
-        res.status(409).send();
+        res.status(200).json({url: "/login"});
     }
 };
 
+
 /**
  * Sign up a new user.
  *
@@ -74,7 +77,8 @@ exports.loggedIn = function (req, res) {
  */
 exports.register = function (req, res) {
 
-    var username = req.body.username;
+    let username = req.body.username;
+
     User.findOne({username: username}).exec(function (err, user) {
         if (err) {
             console.log('Rregistration Error', err);
@@ -86,6 +90,8 @@ exports.register = function (req, res) {
             return;
         }
 
+        console.log(user);
+
         user = new User({username: req.body.username});
 
         user.set('hashed_password', hashPW(req.body.password));
@@ -123,24 +129,6 @@ exports.register = function (req, res) {
     });
 };
 
-
-/**
- * Check user login status.  Redirect appropriately.
- *
- * @param req
- * @param res
- */
-exports.loggedIn = function (req, res) {
-
-    if (req.session.loggedIn && req.session.authy) {
-        res.status(200).json({url: "/protected"});
-    } else if (req.session.loggedIn && !req.session.authy) {
-        res.status(200).json({url: "/2fa"});
-    } else {
-        res.status(200).json({url: "/login"});
-    }
-};
-
 /**
  * Request a OneCode via SMS
  *
@@ -148,7 +136,7 @@ exports.loggedIn = function (req, res) {
  * @param res
  */
 exports.sms = function (req, res) {
-    var username = req.session.username;
+    let username = req.session.username;
     User.findOne({username: username}).exec(function (err, user) {
         console.log("Send SMS");
         if (err) {
@@ -182,7 +170,7 @@ exports.sms = function (req, res) {
  * @param res
  */
 exports.voice = function (req, res) {
-    var username = req.session.username;
+    let username = req.session.username;
     User.findOne({username: username}).exec(function (err, user) {
         console.log("Send SMS");
         if (err) {
@@ -216,7 +204,7 @@ exports.voice = function (req, res) {
  * @param res
  */
 exports.verify = function (req, res) {
-    var username = req.session.username;
+    let username = req.session.username;
     User.findOne({username: username}).exec(function (err, user) {
         console.log("Verify Token");
         if (err) {
@@ -250,7 +238,7 @@ exports.verify = function (req, res) {
  */
 exports.createonetouch = function (req, res) {
 
-    var username = req.session.username;
+    let username = req.session.username;
     console.log("username: ", username);
     User.findOne({username: username}).exec(function (err, user) {
         if (err) {
@@ -258,7 +246,7 @@ exports.createonetouch = function (req, res) {
             res.status(500).json(err);
         }
 
-        var user_payload = {'message': 'Customize this push notification with your messaging'};
+        let user_payload = {'message': 'Customize this push notification with your messaging'};
 
         authy.send_approval_request(user.authyId, user_payload, {}, null, function (oneTouchErr, oneTouchRes) {
             if (oneTouchErr) {
@@ -284,22 +272,22 @@ exports.createonetouch = function (req, res) {
  */
 function verifyCallback (req) {
 
-    var apiKey = config.API_KEY;
+    let apiKey = config.API_KEY;
 
-    var url = req.headers['x-forwarded-proto'] + "://" + req.hostname + req.url;
-    var method = req.method;
-    var params = req.body;
+    let url = req.headers['x-forwarded-proto'] + "://" + req.hostname + req.url;
+    let method = req.method;
+    let params = req.body;
 
     // Sort the params.
-    var sorted_params = qs.stringify(params).split("&").sort().join("&").replace(/%20/g, '+');
+    let sorted_params = qs.stringify(params).split("&").sort().join("&").replace(/%20/g, '+');
 
-    var nonce = req.headers["x-authy-signature-nonce"];
-    var data = nonce + "|" + method + "|" + url + "|" + sorted_params;
+    let nonce = req.headers["x-authy-signature-nonce"];
+    let data = nonce + "|" + method + "|" + url + "|" + sorted_params;
 
-    var computed_sig = crypto.createHmac('sha256', apiKey).update(data).digest('base64');
-    var sig = req.headers["x-authy-signature"];
+    let computed_sig = crypto.createHmac('sha256', apiKey).update(data).digest('base64');
+    let sig = req.headers["x-authy-signature"];
 
-    return sig == computed_sig;
+    return sig === computed_sig;
 }
 
 /**
@@ -311,7 +299,7 @@ function verifyCallback (req) {
  */
 exports.checkonetouchstatus = function (req, res) {
 
-    var options = {
+    let options = {
         url: "https://api.authy.com/onetouch/json/approval_requests/" + req.session.uuid,
         form: {
             "api_key": config.API_KEY
@@ -345,13 +333,11 @@ exports.checkonetouchstatus = function (req, res) {
  * @param res
  */
 exports.requestPhoneVerification = function (req, res) {
-    var phone_number = req.body.phone_number;
-    var country_code = req.body.country_code;
-    var via = req.body.via;
-
-    console.log("body: ", req.body);
+    let phone_number = req.body.phone_number;
+    let country_code = req.body.country_code;
+    let via = req.body.via;
 
-    var info = {
+    let info = {
         via: 'sms'
         //, locale: 'es',
         //, custom_message: 'Here is your custom message {{code}}',
@@ -384,9 +370,9 @@ exports.requestPhoneVerification = function (req, res) {
  * @param res
  */
 exports.verifyPhoneToken = function (req, res) {
-    var country_code = req.body.country_code;
-    var phone_number = req.body.phone_number;
-    var token = req.body.token;
+    let country_code = req.body.country_code;
+    let phone_number = req.body.phone_number;
+    let token = req.body.token;
 
     if (phone_number && country_code && token) {
 
diff --git a/server/model/user_model.js b/server/model/user_model.js
index f952a2c..4c7df7e 100644
--- a/server/model/user_model.js
+++ b/server/model/user_model.js
@@ -1,7 +1,7 @@
-var mongoose = require('mongoose'),
+const mongoose = require('mongoose'),
     Schema = mongoose.Schema;
 
-var UserSchema = new Schema({
+const UserSchema = new Schema({
     username: {type: String, required: true, unique: true},
     email: {type: String, required: true},
     

From fe20b3f048873215ec551678b2e7c6a6c8693d5b Mon Sep 17 00:00:00 2001
From: Josh <josh@twilio.com>
Date: Mon, 29 Jan 2018 15:01:03 -0800
Subject: [PATCH 10/12] Adding language support to Verify example

---
 public/app.js                  |  3 ++-
 public/verification/index.html | 49 ++++++++++++++++++++++++++++++----
 server/controllers/users.js    |  7 ++---
 3 files changed, 50 insertions(+), 9 deletions(-)

diff --git a/public/app.js b/public/app.js
index 330cbef..4dcdddc 100644
--- a/public/app.js
+++ b/public/app.js
@@ -147,7 +147,8 @@ app.controller('AuthyController', function ($scope, $http, $window, $interval) {
 app.controller('PhoneVerificationController', function ($scope, $http, $window, $timeout) {
 
     $scope.setup = {
-        via: "sms"
+        via: "sms",
+        locale: "en"
     };
     
     $scope.view = {
diff --git a/public/verification/index.html b/public/verification/index.html
index d468a12..4af2423 100644
--- a/public/verification/index.html
+++ b/public/verification/index.html
@@ -28,7 +28,7 @@
 
 <div class="container" ng-controller="PhoneVerificationController">
     <div class="row centered-form">
-        <div class="col-xs-12 col-sm-8 col-md-4 col-sm-offset-2 col-md-offset-4">
+        <div class="col-xs-12 col-sm-8 col-md-8 col-sm-offset-2 col-md-offset-2">
             <div class="panel panel-default">
                 <div class="panel-heading">
                     <h3 class="panel-title">Authy Phone Verification</h3>
@@ -36,7 +36,7 @@ <h3 class="panel-title">Authy Phone Verification</h3>
                 <div class="panel-body" ng-show="view.start">
                     <form role="form">
                         <div class="row">
-                            <div class="col-xs-3 col-sm-3 col-md-3">
+                            <div class="col-xs-3 col-sm-3 col-md-2">
                                 <div class="form-group">
                                     <input type="text" name="country_code" id="country_code"
                                            class="form-control"
@@ -45,7 +45,7 @@ <h3 class="panel-title">Authy Phone Verification</h3>
                                            placeholder="Country Code">
                                 </div>
                             </div>
-                            <div class="col-xs-6 col-sm-6 col-md-6">
+                            <div class="col-xs-6 col-sm-6 col-md-5">
                                 <div class="form-group">
                                     <input type="text" name="phone_number" id="phone_number"
                                            class="form-control"
@@ -54,7 +54,7 @@ <h3 class="panel-title">Authy Phone Verification</h3>
                                            placeholder="Phone #">
                                 </div>
                             </div>
-                            <div class="col-xs-3 col-sm-3 col-md-3">
+                            <div class="col-xs-3 col-sm-3 col-md-2">
                                 <div class="form-group">
                                     <select name="via" id="via" ng-model="setup.via"  class="form-control">
                                         <option value="sms" selected="selected">SMS</option>
@@ -62,7 +62,46 @@ <h3 class="panel-title">Authy Phone Verification</h3>
                                     </select>
                                 </div>
                             </div>
-
+                            <div class="col-xs-3 col-sm-3 col-md-2">
+                                <div class="form-group">
+                                    <select name="locale" id="locale" ng-model="setup.locale"  class="form-control">
+                                        <option value="af">Afrikaans</option>
+                                        <option value="ar">Arabic</option>
+                                        <option value="ca">Catalan</option>
+                                        <option value="zh">Chinese</option>
+                                        <option value="zh-CN">Chinese (Mandarin)</option>
+                                        <option value="zh-HK">Chinese (Cantonese)</option>
+                                        <option value="hr">Croatian</option>
+                                        <option value="cs">Czech</option>
+                                        <option value="da">Danish</option>
+                                        <option value="nl">Dutch</option>
+                                        <option value="en" selected="selected">English</option>
+                                        <option value="fi">Finnish</option>
+                                        <option value="fr">French</option>
+                                        <option value="de">German</option>
+                                        <option value="el">Greek</option>
+                                        <option value="he">Hebrew</option>
+                                        <option value="hi">Hindi</option>
+                                        <option value="hu">Hungarian</option>
+                                        <option value="id">Indonesian</option>
+                                        <option value="it">Italian</option>
+                                        <option value="ja">Japanese</option>
+                                        <option value="ko">Korean</option>
+                                        <option value="ms">Malay</option>
+                                        <option value="nb">Norwegian</option>
+                                        <option value="pl">Polish</option>
+                                        <option value="pt-BR">Portuguese - Brazil</option>
+                                        <option value="pt">Protuguese</option>
+                                        <option value="ru">Russian</option>
+                                        <option value="es">Spanish</option>
+                                        <option value="sv">Swedish</option>
+                                        <option value="tl">Tagalog</option>
+                                        <option value="th">Thai</option>
+                                        <option value="tr">Turkish</option>
+                                        <option value="vi">Vietnamese</option>
+                                    </select>
+                                </div>
+                            </div>
                         </div>
 
                         <input type="submit" value="Request Verification"
diff --git a/server/controllers/users.js b/server/controllers/users.js
index 35b62b3..cb4f2e3 100644
--- a/server/controllers/users.js
+++ b/server/controllers/users.js
@@ -336,16 +336,17 @@ exports.requestPhoneVerification = function (req, res) {
     let phone_number = req.body.phone_number;
     let country_code = req.body.country_code;
     let via = req.body.via;
+    let locale = req.body.locale;
 
     let info = {
-        via: 'sms'
-        //, locale: 'es',
+        via: via
+        , locale: locale,
         //, custom_message: 'Here is your custom message {{code}}',
         //, custom_code: '0051243'
     };
 
 
-    if (phone_number && country_code && via) {
+    if (phone_number && country_code && via && locale) {
 
         authy.phones().verification_start(phone_number, country_code, info, function (err, response) {
             if (err) {

From 9f469aef3ef95baa8a5e4c2339f7ec0bf15c3359 Mon Sep 17 00:00:00 2001
From: Josh <josh@twilio.com>
Date: Tue, 30 Jan 2018 11:54:43 -0800
Subject: [PATCH 11/12] Lookup a number before using Verify or Registering a
 user with Authy.

Gate user registration or SMS send based upon line type.
---
 demo.bat                       |  2 +
 demo.env                       |  2 +
 index.js                       |  4 ++
 package.json                   |  3 +-
 public/app.js                  | 52 ++++++++++++++++++++--
 public/register/index.html     | 14 +++++-
 public/verification/index.html | 15 ++++++-
 server/config.js               |  4 +-
 server/controllers/users.js    | 28 ++++++++++++
 server/lookup.js               | 79 ++++++++++++++++++++++++++++++++++
 10 files changed, 195 insertions(+), 8 deletions(-)
 create mode 100644 server/lookup.js

diff --git a/demo.bat b/demo.bat
index b524cfa..04fdb7e 100644
--- a/demo.bat
+++ b/demo.bat
@@ -1,2 +1,4 @@
 SET SIMPLE_DEMO_PORT=1337
 SET DEMO_AUTHY_API_KEY='ADD_YOUR_KEY_HERE'
+SET DEMO_TWILIO_ACCOUNT_SID=''
+SET DEMO_TWILIO_AUTH_TOKEN=''
diff --git a/demo.env b/demo.env
index f30e817..8f797e7 100644
--- a/demo.env
+++ b/demo.env
@@ -1,2 +1,4 @@
 export SIMPLE_DEMO_PORT=1337
 export DEMO_AUTHY_API_KEY='ADD_YOUR_KEY_HERE'
+export DEMO_TWILIO_ACCOUNT_SID=''
+export DEMO_TWILIO_AUTH_TOKEN=''
diff --git a/index.js b/index.js
index 3eabc02..8fcd42b 100644
--- a/index.js
+++ b/index.js
@@ -85,6 +85,10 @@ router.route('/loggedIn').post(users.loggedIn);
 router.route('/verification/start').post(users.requestPhoneVerification);
 router.route('/verification/verify').post(users.verifyPhoneToken);
 
+/**
+ * Lookups
+ */
+router.route('/lookup').post(users.lookupNumber);
 
 /**
  * Require user to be logged in and authenticated with 2FA
diff --git a/package.json b/package.json
index 0130dbc..0d71f9d 100644
--- a/package.json
+++ b/package.json
@@ -30,6 +30,7 @@
     "mongodb": "^3.0.2",
     "mongoose": "^5.0.2",
     "nodemon": "^1.11.0",
-    "qs": "^6.3.0"
+    "qs": "^6.3.0",
+    "request": "^2.83.0"
   }
 }
diff --git a/public/app.js b/public/app.js
index 4dcdddc..f9974ab 100644
--- a/public/app.js
+++ b/public/app.js
@@ -21,6 +21,26 @@ app.controller('LoginController', function ($scope, $http, $window) {
 app.controller('RegistrationController', function ($scope, $http, $window) {
 
     $scope.setup = {};
+    $scope.info = false;
+    $scope.disabledRegister = true;
+
+    $scope.lookup = function () {
+        $http.post('/api/lookup', $scope.setup)
+            .success(function (data, status, headers, config) {
+                console.log("Success Lookup: ", data);
+                $scope.info = data.info.carrier;
+                if ($scope.info.type === "mobile") {
+                    $scope.disabledRegister = false;
+                    alert("Lookup has determined you are registering a mobile phone number.");
+                } else {
+                    $scope.disabledRegister = true;
+                    alert("You must register with a mobile number only.");
+                }
+            })
+            .error(function (data, status, headers, config) {
+                console.error("Failure Lookup: ", data);
+            });
+    };
 
     $scope.register = function () {
         if ($scope.password1 === $scope.password2 && $scope.password1 !== "") {
@@ -125,7 +145,7 @@ app.controller('AuthyController', function ($scope, $http, $window, $interval) {
     /**
      * Request the OneTouch status.
      */
-    function oneTouchStatus() {
+    function oneTouchStatus () {
         $http.post('/api/authy/onetouchstatus')
             .success(function (data, status, headers, config) {
                 console.log("OneTouch Status: ", data);
@@ -150,11 +170,37 @@ app.controller('PhoneVerificationController', function ($scope, $http, $window,
         via: "sms",
         locale: "en"
     };
-    
+
     $scope.view = {
         start: true
     };
 
+    $scope.info = false;
+    $scope.disabled = true;
+
+    $scope.lookup = function () {
+        $scope.info = false;
+        $http.post('/api/lookup', $scope.setup)
+            .success(function (data, status, headers, config) {
+                console.log("Success Lookup: ", data);
+                $scope.info = data.info.carrier;
+                if ($scope.info.type === "mobile") {
+                    $scope.disabled = false;
+                    alert("Lookup has determined you are registering a mobile phone number.");
+                } else if ($scope.info.type === "landline") {
+                    $scope.disabled = false;
+                    $scope.setup.via = "call";
+                    alert("Lookup has determined you are registering with a landline.");
+                } else {
+                    $scope.disabled = true;
+                    alert("You must register with a mobile or landline number only.  No VOIP.");
+                }
+            })
+            .error(function (data, status, headers, config) {
+                console.error("Failure Lookup: ", data);
+            });
+    };
+
     /**
      * Initialize Phone Verification
      */
@@ -185,7 +231,7 @@ app.controller('PhoneVerificationController', function ($scope, $http, $window,
     };
 
     $scope.logout = function () {
-            $window.location.href = $window.location.origin;
+        $window.location.href = $window.location.origin;
     };
 });
 
diff --git a/public/register/index.html b/public/register/index.html
index 56b0e74..eb1a595 100644
--- a/public/register/index.html
+++ b/public/register/index.html
@@ -88,9 +88,19 @@ <h3 class="panel-title">Authy Demo Registration</h3>
                                 </div>
                             </div>
                         </div>
-
-                        <input type="submit" value="Register" ng-click="register()" class="btn btn-info btn-block">
+                        <div class="row" ng-show="info !== false">
+                            <div class="col-xs-12 col-sm-12 col-md-12">
+                                <h5>Lookup Information</h5>
+                                <pre>
+                                    {{info | json}}
+                                </pre>
+                                <p>Lookup allows you to determine if a user is signing up with a mobile number.  You may want to prevent users from registering with a landline or VOIP number.</p>
+                            </div>
+                        </div>
+                        <input type="submit" value="Lookup" ng-click="lookup()" class="btn btn-info btn-block">
+                        <input type="submit" ng-disabled="disabledRegister" value="Register" ng-click="register()" class="btn btn-info btn-block">
                         <small style="float: right;"><a href="/login">Login</a></small>
+
                     </form>
                 </div>
             </div>
diff --git a/public/verification/index.html b/public/verification/index.html
index 4af2423..0c0cc4a 100644
--- a/public/verification/index.html
+++ b/public/verification/index.html
@@ -103,8 +103,21 @@ <h3 class="panel-title">Authy Phone Verification</h3>
                                 </div>
                             </div>
                         </div>
+                        <div class="row" ng-show="info !== false">
+                            <div class="col-xs-12 col-sm-12 col-md-12">
+                                <h5>Lookup Information</h5>
+                                <pre>
+                                    {{info | json}}
+                                </pre>
+                                <p>Lookup allows you to determine if a user is signing up with a mobile number.  You may want to prevent users from registering from certain kinds of phones.</p>
+                            </div>
+                        </div>
+
+                        <input type="submit" value="Lookup Registration Number"
+                               ng-click="lookup()"
+                               class="btn btn-info btn-block">
 
-                        <input type="submit" value="Request Verification"
+                        <input type="submit" ng-disabled="disabled" value="Request Verification"
                                ng-click="startVerification()"
                                class="btn btn-info btn-block">
                     </form>
diff --git a/server/config.js b/server/config.js
index 1954ddc..227f85e 100644
--- a/server/config.js
+++ b/server/config.js
@@ -1,5 +1,7 @@
 module.exports = {
     PORT: process.env.SIMPLE_DEMO_PORT,
     API_KEY: process.env.DEMO_AUTHY_API_KEY,
-    SECRET: "SUPERSECRETSECRET"
+    SECRET: "SUPERSECRETSECRET",
+    TWILIO_ACCT_SID: process.env.DEMO_TWILIO_ACCOUNT_SID,
+    TWILIO_AUTH_TOKEN: process.env.DEMO_TWILIO_AUTH_TOKEN
 };
\ No newline at end of file
diff --git a/server/controllers/users.js b/server/controllers/users.js
index cb4f2e3..dcf76c8 100644
--- a/server/controllers/users.js
+++ b/server/controllers/users.js
@@ -6,6 +6,7 @@ const qs = require('qs');
 
 const authy = require('authy')(config.API_KEY);
 
+const lookup = require('../lookup')(config.TWILIO_ACCT_SID,config.TWILIO_AUTH_TOKEN);
 
 function hashPW (pwd) {
     return crypto.createHash('sha256').update(pwd).digest('base64').toString();
@@ -395,6 +396,33 @@ exports.verifyPhoneToken = function (req, res) {
     }
 };
 
+/**
+ * Lookup a phone number
+ * @param req
+ * @param res
+ */
+exports.lookupNumber = function (req, res) {
+    let country_code = req.body.country_code;
+    let phone_number = req.body.phone_number;
+
+    if(country_code && phone_number){
+        lookup.get(phone_number,country_code, function(resp){
+            console.log("response", resp);
+            if(resp === false){
+                res.status(500).send({"success": false});
+            } else {
+                console.log("successful response", resp);
+                res.json({info: resp})
+            }
+        });
+
+    } else {
+        console.log('Failed in Register Phone API Call', req.body);
+        res.status(500).json({error: "Missing fields"});
+    }
+};
+
+
 /**
  * Create the initial user session.
  *
diff --git a/server/lookup.js b/server/lookup.js
new file mode 100644
index 0000000..f694b1b
--- /dev/null
+++ b/server/lookup.js
@@ -0,0 +1,79 @@
+const request = require('request');
+const VERSION = "0.1";
+
+module.exports = function (SID, AUTH_TOKEN) {
+	return new Lookup(SID, AUTH_TOKEN);
+};
+
+function Lookup(SID, AUTH_TOKEN) {
+	this.SID = SID;
+	this.AUTH_TOKEN = AUTH_TOKEN;
+	this.URL = "https://lookups.twilio.com";
+	this.headers = {};
+    this.SETUP = false;
+	this.init();
+}
+
+Lookup.prototype.init = function () {
+
+    if(!this.SID || !this.AUTH_TOKEN){
+        console.error("Account SID AND Auth Token required for Lookups");
+    } else {
+        this.SETUP = true;
+        this.headers = {
+            "Authorization": "Basic " + new Buffer(this.SID + ":" + this.AUTH_TOKEN).toString("base64")
+        };
+        console.info("Lookup setup properly");
+    }
+};
+
+/**
+ * Lookup a number.
+ *
+ */
+Lookup.prototype.get = function (phone_number, country_code, callback) {
+    console.log(this);
+    if(!this.SETUP){
+        console.log('Lookup was not setup properly.');
+        callback(false);
+    } else {
+        this._request("get", "/v1/PhoneNumbers/" + country_code + phone_number + "/?Type=carrier", {},
+            callback
+        );
+    }
+};
+
+Lookup.prototype._request = function (type, path, params, callback, qs) {
+
+	let options = {
+		url: this.URL + path,
+		form: params,
+		headers: this.headers,
+		qs: qs,
+		json: true,
+		jar: false,
+		strictSSL: true
+	};
+
+	let callback_check = function (err, res, body) {
+		if (!err) {
+			if (res.statusCode === 200) {
+				callback(body);
+			} else {
+				callback(false);
+			}
+		} else {
+			callback(err);
+		}
+	};
+
+	switch (type) {
+		case "post":
+			request.post(options, callback_check);
+			break;
+
+		case "get":
+			request.get(options, callback_check);
+			break;
+	}
+};
\ No newline at end of file

From 525c05406a986d4b1b6223732baa70a6b54216bc Mon Sep 17 00:00:00 2001
From: Josh <josh@twilio.com>
Date: Wed, 18 Jul 2018 10:00:03 -0700
Subject: [PATCH 12/12] Updating titles.

---
 public/2fa/index.html          | 2 +-
 public/index.html              | 6 +++---
 public/login/index.html        | 2 +-
 public/protected/index.html    | 2 +-
 public/register/index.html     | 4 ++--
 public/verification/index.html | 4 ++--
 public/verified/index.html     | 2 +-
 7 files changed, 11 insertions(+), 11 deletions(-)

diff --git a/public/2fa/index.html b/public/2fa/index.html
index 7898711..79501cc 100644
--- a/public/2fa/index.html
+++ b/public/2fa/index.html
@@ -2,7 +2,7 @@
 <html lang="en">
 <head>
     <meta charset="UTF-8">
-    <title>2FA - Super Simple Authy Demo</title>
+    <title>2FA - Super Simple Account Security Demo</title>
     <link rel="icon" type="image/png" href="/assets/favicon-32x32.png" sizes="32x32">
     <link rel="icon" type="image/png" href="/assets/favicon-16x16.png" sizes="16x16">
     <link rel="stylesheet" href="https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css"
diff --git a/public/index.html b/public/index.html
index 0dfe04f..cee1dfc 100644
--- a/public/index.html
+++ b/public/index.html
@@ -2,7 +2,7 @@
 <html lang="en">
 <head>
     <meta charset="UTF-8">
-    <title>Super Simple Authy Demo</title>
+    <title>Twilio Account Security Demo</title>
     <!--Made by an engineer for engineers-->
     <link rel="icon" type="image/png" href="/assets/favicon-32x32.png" sizes="32x32">
     <link rel="icon" type="image/png" href="/assets/favicon-16x16.png" sizes="16x16">
@@ -30,7 +30,7 @@
         <div class="col-xs-12 col-sm-8 col-md-4 col-sm-offset-2 col-md-offset-4">
             <div class="panel panel-default">
                 <div class="panel-heading">
-                    <h3 class="panel-title">Authy Demos</h3>
+                    <h3 class="panel-title">Account Security Demo</h3>
                 </div>
                 <div class="panel-body">
                     <div class="row">
@@ -67,4 +67,4 @@ <h3 class="panel-title">Authy Demos</h3>
     </div>
 </div>
 </body>
-</html>
\ No newline at end of file
+</html>
diff --git a/public/login/index.html b/public/login/index.html
index da0feb1..43e0074 100644
--- a/public/login/index.html
+++ b/public/login/index.html
@@ -2,7 +2,7 @@
 <html lang="en">
 <head>
     <meta charset="UTF-8">
-    <title>Login - Super Simple Authy Demo</title>
+    <title>Login - Super Simple Account Security Demo</title>
     <!--Made by an engineer for engineers-->
     <link rel="icon" type="image/png" href="/assets/favicon-32x32.png" sizes="32x32">
     <link rel="icon" type="image/png" href="/assets/favicon-16x16.png" sizes="16x16">
diff --git a/public/protected/index.html b/public/protected/index.html
index db3aa2e..bafeb97 100644
--- a/public/protected/index.html
+++ b/public/protected/index.html
@@ -2,7 +2,7 @@
 <html lang="en">
 <head>
     <meta charset="UTF-8">
-    <title>Protected Content - Super Simple Authy Demo</title>
+    <title>Protected Content - Super Simple Account Security Demo</title>
     <!--Made by an engineer for engineers-->
     <link rel="icon" type="image/png" href="/assets/favicon-32x32.png" sizes="32x32">
     <link rel="icon" type="image/png" href="/assets/favicon-16x16.png" sizes="16x16">
diff --git a/public/register/index.html b/public/register/index.html
index eb1a595..d827d96 100644
--- a/public/register/index.html
+++ b/public/register/index.html
@@ -2,7 +2,7 @@
 <html lang="en">
 <head>
     <meta charset="UTF-8">
-    <title>Register User - Super Simple Authy Demo</title>
+    <title>Register User - Super Simple Account Security Demo</title>
     <!--Made by an engineer for engineers-->
     <link rel="icon" type="image/png" href="/assets/favicon-32x32.png" sizes="32x32">
     <link rel="icon" type="image/png" href="/assets/favicon-16x16.png" sizes="16x16">
@@ -31,7 +31,7 @@
         <div class="col-xs-12 col-sm-8 col-md-4 col-sm-offset-2 col-md-offset-4">
             <div class="panel panel-default">
                 <div class="panel-heading">
-                    <h3 class="panel-title">Authy Demo Registration</h3>
+                    <h3 class="panel-title">Account Security Demo Registration</h3>
                 </div>
                 <div class="panel-body">
                     <form role="form">
diff --git a/public/verification/index.html b/public/verification/index.html
index 0c0cc4a..d858029 100644
--- a/public/verification/index.html
+++ b/public/verification/index.html
@@ -2,7 +2,7 @@
 <html lang="en">
 <head>
     <meta charset="UTF-8">
-    <title>Start Phone Verification - Super Simple Authy Demo</title>
+    <title>Start Phone Verification - Super Simple Account Security Demo</title>
     <!--Made by an engineer for engineers-->
     <link rel="icon" type="image/png" href="/assets/favicon-32x32.png" sizes="32x32">
     <link rel="icon" type="image/png" href="/assets/favicon-16x16.png" sizes="16x16">
@@ -31,7 +31,7 @@
         <div class="col-xs-12 col-sm-8 col-md-8 col-sm-offset-2 col-md-offset-2">
             <div class="panel panel-default">
                 <div class="panel-heading">
-                    <h3 class="panel-title">Authy Phone Verification</h3>
+                    <h3 class="panel-title">Account Security Phone Verification</h3>
                 </div>
                 <div class="panel-body" ng-show="view.start">
                     <form role="form">
diff --git a/public/verified/index.html b/public/verified/index.html
index 8dcfcc3..12c78e7 100644
--- a/public/verified/index.html
+++ b/public/verified/index.html
@@ -2,7 +2,7 @@
 <html lang="en">
 <head>
     <meta charset="UTF-8">
-    <title>Phone Verified Content - Super Simple Authy Demo</title>
+    <title>Twilio Verified Content - Super Simple Account Security Demo</title>
     <!--Made by an engineer for engineers-->
     <link rel="icon" type="image/png" href="/assets/favicon-32x32.png" sizes="32x32">
     <link rel="icon" type="image/png" href="/assets/favicon-16x16.png" sizes="16x16">