feat(auth): Introduce 5-day grace period for email verification before lockout

This commit is contained in:
Mohan Ki
2026-07-27 19:16:17 +05:30
parent 4fe25f3de5
commit bd17947106
3 changed files with 71 additions and 30 deletions
+1 -1
View File
@@ -94,7 +94,7 @@ router.post('/login', async (req, res) => {
const { verifyToken } = require('../middleware/auth');
router.get('/me', verifyToken, async (req, res) => {
try {
const userQuery = await pgPool.query('SELECT id, email, role, is_email_verified FROM users WHERE id = $1', [req.user.id]);
const userQuery = await pgPool.query('SELECT id, email, role, is_email_verified, created_at FROM users WHERE id = $1', [req.user.id]);
if (userQuery.rows.length === 0) return res.status(404).json({ error: 'User not found' });
res.json({ user: userQuery.rows[0] });
} catch (err) {