Email verification

[luwol03]

Status	Type	Env Vars Change
:white_check_mark: Ready	Feature	Yes (Breaking)

Description

This option adds an mailer which can send account confirmation links via email.

Configuration

To test this feature you can create an free ethereal email account without registration.

Ethereal is a fake SMTP service, mostly aimed at Nodemailer users (but not limited to). It's a completely free anti-transactional email service where messages never get delivered. [Source]

{
  // ...
  server: {
    base_url: "http://localhost:5000",
    // ...
  },

  mailer: {
    enabled: true,
    host: 'smtp.ethereal.email',
    port: 587,
    auth: {
      user: '',
      pass: '',
    },
    from: '"Vocascan" <vocascan@example.com>',
  },

  service: {
    // invite_code: true, // server.registration_locked is moved and can be enabled ontop of the email verification
    email_confirm: true, // enable email confirmation
    email_confirm_live_time: '2h', // how long the verification token (link) is valid
    email_confirm_time: '2m', // how long the user can use vocascan without verifying his email
  },
}

Motivation and Context

Screenshots / GIFs (if appropriate):

Todo

• [x] swagger docs
• [x] verification level
• [x] add more nodemailer config options
• [x] dedicated request verification route
• [x] send verified on login
• [x] improve templates (style)
• [x] also send text email
• [x] directly verify user if verification is turned off
• [x] add disabled field to user in migration
• [x] check if user is already verified
• [x] move registration logged config var
• [x] token lifetimes
• [x] add default config
• [x] add mailcatcher for email debugging

Checklist

• [x] I have read the CONTRIBUTING document.
• [x] I have considered the accessibility of my changes (i.e. did I add proper content descriptions to images, or run my changes with talkback enabled?)
• [x] I have documented my code if needed

Resolves