Email verification use-case

[vmundhra]

Hello @hagopj13

First of all fantastic project. Beautifully structured and well written.

I have a question on the use of 2 APIs related to email verification i.e. "/send-verification-email" & "/verify-email". Can you throw some light on how and when would these be used from the perspective of UI? It seems like on registration/login an access token is send to user which gives access to protected routes. Which means if even though the user email is not verified, the user gets to perform authenticated actions. So my question is why do we have "isEmailVerified" in user model, how would the two apis be used to verify the email from the perspective of UI, and how the email verification status can be used to allow certain actions?

Would really appreciate your reply and I am sure will help the community a-lot to take advantage of this built-in feature.

Thanks again.