Refactor dbQueries to use Account type instead of accountInfo and block non verified emails

Author: Wassim-Rached

src/helpers/dbQueries.ts

@@ -1,13 +1,14 @@
 import { query } from "../utils/db";
 
-type accountInfo = {
+type Account = {
   id: number;
   password: string;
+  is_email_verified: boolean;
 };
 
 export async function queryAccountInfoByEmail(
   email: string
-): Promise<accountInfo | null> {
+): Promise<Account | null> {
   try {
     const result = await query(
       "SELECT id,password FROM accounts WHERE email = $1",

src/routers.ts

@@ -85,6 +85,10 @@ export function handleRoutes(app: Express) {
       return res.status(401).json({ message: "Invalid credentials" });
     }
 
+    if (!userInfo.is_email_verified) {
+      return res.status(403).json({ message: "Email is not verified" });
+    }
+
     const token = generateToken({ email: email, sub: userInfo.id });
 
     res.json({ token });