Made it so users have to verify their e-mail starting to use the application

src/pages/api/reset/confirm.ts

@@ -1,5 +1,5 @@
 import {NextApiRequest, NextApiResponse} from "next";
-import {getAuth, sendPasswordResetEmail, confirmPasswordReset} from "firebase/auth";
+import {getAuth, confirmPasswordReset} from "firebase/auth";
 import {app} from "@/firebase";
 import {sessionOptions} from "@/lib/session";
 import {withIronSessionApiRoute} from "iron-session/next";

src/pages/api/reset/sendVerification.ts

@@ -0,0 +1,24 @@
+import {NextApiRequest, NextApiResponse} from "next";
+import {getAuth, sendSignInLinkToEmail, User} from "firebase/auth";
+import {app} from "@/firebase";
+import {sessionOptions} from "@/lib/session";
+import {withIronSessionApiRoute} from "iron-session/next";
+
+const auth = getAuth(app);
+
+export default withIronSessionApiRoute(sendVerification, sessionOptions);
+
+async function sendVerification(req: NextApiRequest, res: NextApiResponse) {
+	console.log(auth.currentUser);
+	if (req.session.user) {
+		sendSignInLinkToEmail(auth, req.session.user.email, {
+			url: "https://encoach.com/",
+			handleCodeInApp: true,
+		})
+			.then(() => res.status(200).json({ok: true}))
+			.catch((e) => {
+				console.log(e);
+				res.status(404).json({ok: false});
+			});
+	}
+}

src/pages/api/reset/verify.ts

@@ -0,0 +1,29 @@
+import {NextApiRequest, NextApiResponse} from "next";
+import {getAuth, signInWithEmailLink} from "firebase/auth";
+import {app} from "@/firebase";
+import {sessionOptions} from "@/lib/session";
+import {withIronSessionApiRoute} from "iron-session/next";
+import {doc, getFirestore, setDoc} from "firebase/firestore";
+
+const auth = getAuth(app);
+const db = getFirestore(app);
+
+export default withIronSessionApiRoute(verify, sessionOptions);
+
+async function verify(req: NextApiRequest, res: NextApiResponse) {
+	const {link} = req.body as {link: string};
+
+	if (req.session.user) {
+		signInWithEmailLink(auth, req.session.user.email, link)
+			.then(async () => {
+				const userRef = doc(db, "users", req.session.user!.id);
+				await setDoc(userRef, {isVerified: true}, {merge: true});
+
+				req.session.user = {...req.session.user!, isVerified: true};
+				await req.session.save();
+
+				res.status(200).json({ok: true});
+			})
+			.catch(() => res.status(404).json({ok: false}));
+	}
+}