[FEATURE] : Implement email verification flow for user authentication

[Akash504-ai]

Feature Description

Implement an email verification system during user registration to verify user email addresses before allowing account access.

Problem it solves

Currently, users can register using any email address without verification. This can lead to fake accounts, spam registrations, and reduced platform security.

Possible Solution

• Generate a unique verification token during signup
• Send verification email using Brevo
• Create a verification endpoint to validate tokens
• Mark users as verified after successful verification
• Restrict login for unverified accounts

Additional Context

This feature will improve authentication security and make the platform more production-ready.

[nihar-ux18]

Hi @Akash504-ai,

I'd like to work on this feature. I plan to implement the complete email verification flow, including:

• Generating a verification token during signup
• Sending a verification email using Brevo
• Creating an email verification endpoint
• Marking users as verified after successful verification
• Restricting login for unverified accounts
• Updating the frontend to guide users through the verification process

Could you please assign this issue to me? Thanks!

[Akash504-ai]

Hi @nihar-ux18, thanks for your interest in working on this feature.
Just to clarify, the original intention for this issue was an OTP-based email verification flow rather than a verification-link flow. So after registration the user should receive a 6-digit OTP via email (using Brevo), enter it on a verification page, and only then be marked as verified. Unverified users should not be able to log in.

Could you confirm whether your implementation will follow this OTP-based approach? If so, I'll be happy to assign the issue to you.

[Sakshi20Deshmukh]

I'd like to work on this feature. I plan to implement the complete email verification flow, Yes, my implementation will follow the OTP-based email verification approach.

My plan is to:

Generate a secure 6-digit OTP during user registration.
Send the OTP via Brevo email service.
Create a verification page where users can submit the OTP.
Verify the OTP and mark the user as verified upon successful validation.
Prevent unverified users from logging in until verification is completed.
Handle OTP expiration and invalid OTP scenarios appropriately.

Please feel free to assign the issue to me.

[nihar-ux18]

Hi @Akash504-ai,

Thanks for the clarification! Yes, I'll implement the OTP-based email verification flow as described.

My implementation will include:

• Generating a secure 6-digit OTP during user registration.
• Sending the OTP to the user's email using Brevo.
• Creating a verification endpoint to validate the OTP.
• Marking the user as verified upon successful OTP verification.
• Preventing unverified users from logging in.
• Handling OTP expiration and invalid OTP cases with appropriate responses.

I'll make sure the implementation follows the project's existing architecture and coding standards.

Looking forward to working on this. Please assign the issue to me. Thanks!