feat(auth): Introduce 5-day grace period for email verification before lockout
This commit is contained in:
+1
-1
@@ -94,7 +94,7 @@ router.post('/login', async (req, res) => {
|
||||
const { verifyToken } = require('../middleware/auth');
|
||||
router.get('/me', verifyToken, async (req, res) => {
|
||||
try {
|
||||
const userQuery = await pgPool.query('SELECT id, email, role, is_email_verified FROM users WHERE id = $1', [req.user.id]);
|
||||
const userQuery = await pgPool.query('SELECT id, email, role, is_email_verified, created_at FROM users WHERE id = $1', [req.user.id]);
|
||||
if (userQuery.rows.length === 0) return res.status(404).json({ error: 'User not found' });
|
||||
res.json({ user: userQuery.rows[0] });
|
||||
} catch (err) {
|
||||
|
||||
Reference in New Issue
Block a user