Refactor config to include security.requireEmailVerification

Author: Wassim-Rached

src/config.ts

@@ -4,6 +4,10 @@ import dotenv from "dotenv";
 dotenv.config();
 
 export default {
+  security: {
+    requireEmailVerification:
+      process.env.REQUIRE_EMAIL_VERIFICATION === "true" || true,
+  },
   db: {
     user: process.env.DB_USER || "postgres",
     host: process.env.DB_HOST || "localhost",

src/routers.ts

@@ -17,6 +17,7 @@ import {
 import { HealthCheckResponse } from "./types";
 import configuration from "./config";
 import { AUTHORITIES, getAccountAuthorities } from "./authorities";
+import config from "./config";
 
 export function handleRoutes(app: Express) {
   app.get("/", (req: Request, res: Response) => {
@@ -85,7 +86,10 @@ export function handleRoutes(app: Express) {
       return res.status(401).json({ message: "Invalid credentials" });
     }
 
-    if (!userInfo.is_email_verified) {
+    if (
+      config.security.requireEmailVerification &&
+      !userInfo.is_email_verified
+    ) {
       return res.status(403).json({ message: "Email is not verified" });
     }