- Introduce email_verified column and email_verifications table for token-based verification - Add nodemailer dependency and create mailer service (SMTP + dev fallback to console) - On registration, generate 24h verification token and send email (or log URL in dev) - Add /verify-email GET route to validate tokens and mark user as verified - Add /resend-verification POST route for logged-in users to re-send link - Update flash system with new warning style for unverified users - Update .env.example with APP_BASE_URL and SMTP_* configuration variables Note: existing users are grandfathered in (email_verified=1) via migration. |
||
|---|---|---|
| .. | ||
| migrations | ||
| index.js | ||