Email verification workflow with rate limiting

[yinanazhou]

• Add verification pending page with countdown timer for UX
• Implement 60s rate limiting for resend verification emails
• Add session management utilities for pending verification state
• Handle unverified accounts in custom login flow
• Update registration to redirect to pending page instead of login
• Set token expiry to 24 hours and add session timeout (15 min)

refs: #440

---

Note

Implements an email verification pending workflow with session-based state and 60s resend rate limiting, switches auth templates/paths, adds countdown UI, and updates Playwright tests/config.

• Backend / Auth:
  • Add routes: verify-email-pending/, resend-verification/, and views.custom_login handling unverified users.
  • Registration: create inactive users, send verification email if allowed by RESEND_EMAIL_COOLDOWN, redirect to pending; verification activates account and clears session.
  • New utilities: utils/rate_limiting.py (cache-based cooldown) and utils/session.py (pending email in session).
  • Templates migrated to main/auth/*; update email template text (24h expiry). Add settings: PASSWORD_RESET_TIMEOUT, RESEND_EMAIL_COOLDOWN, PENDING_EMAIL_SESSION_EXPIRY.
• Frontend:
  • New src/auth/ResendEmailCountdown.ts with Vite entry; pending page verify_email_pending.html integrates countdown.
• Tests / Config:
  • Playwright: CI expect timeout tweak; add blockGoogleTranslate routing; simplify translate tests to assert html lang.
  • Auth E2E: expect redirect to verify-email-pending/ and login after verification.

^{Written by Cursor Bugbot for commit d3742b3. This will update automatically on new commits. Configure here.}

[cursor]

This is the final PR Bugbot will review for you during this billing cycle

Your free Bugbot reviews will reset on January 27

Details

You are on the Bugbot Free tier. On this plan, Bugbot will review limited PRs each billing cycle.

To receive Bugbot reviews on all of your PRs, visit the Cursor dashboard to activate Pro and start your 14-day free trial.

[yinanazhou]

Hi @dchiller this is ready for review :)