fix: verify email

[peintnermax]

This PR adds the zitadel legacy email verified check on users. If users have their email not verified yet, they should be directed to /verify page after having verified their password.
From there users can setup auth factors if none are set (email links for newly created users) or should be redirected to verify other methods if they have set any (for later iterations).
If no additional checks are required, users should be logged in directly and their flow should be completed.

The email verified check requires an env variable EMAIL_VERIFICATION set to true to.

Test cases:

• user with password and no verified email logs in -> /verify -> login
• user without password click email link -> /verify -> setup authenticator -> login (invite or email link)
• user with IDP should be checked after coming back from the IDP -> /verify -> login
• user with passkey should be checked after verifying passkey -> /verify -> login

IDEA: the /verify page should be invokable in every situation and resume the login with any scenario
email verified checks are done after updating the session for password, passkey and idp.

Definition of Ready

• I am happy with the code
• Short description of the feature/issue is added in the pr description
• PR is linked to the corresponding user story
• Acceptance criteria are met
• All open todos and follow ups are defined in a new ticket and justified
• Deviations from the acceptance criteria and design are agreed with the PO and documented.
• Vitest unit tests ensure that components produce expected outputs on different inputs.
• Cypress integration tests ensure that login app pages work as expected on good and bad user inputs, ZITADEL responses or IDP redirects. The ZITADEL API is mocked, IDP redirects are simulated.
• Playwright acceptances tests ensure that the happy paths of common user journeys work as expected. The ZITADEL API is not mocked but IDP redirects are simulated.
• No debug or dead code
• My code has no repetitions

[vercel]

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name	Status	Preview	Comments	Updated (UTC)
typescript-login	❌ Failed (Inspect)			Dec 27, 2024 8:56am