use function Tempest\signed_uri;
use function Tempest\temporary_signed_uri;

// unsubscribe link
signed_uri(
    action: [MailingListController::class, 'unsubscribe'],
    email: $email
);

// magic login link
temporary_signed_uri(
    action: PasswordlessAuthenticationController::class,
    duration: Duration::minutes(10),
    userId: $userId
);

final class PasswordlessAuthenticationController
{
    public function __construct(
        private readonly UriGenerator $uri,
    ) {}

    public function __invoke(Request $request): Response
    {
        if (! $this->uri->hasValidSignature($request)) {
            return new Invalid();
        }

        // ...
    }
}