check if require_email_verification is set in Authenticator and sign-in page

Author: alexweissman

CHANGELOG.md

@@ -4,6 +4,7 @@
 - Fix issue with scopes being applied twice in Unique::getPaginatedQuery (https://github.com/userfrosting/extend-user/issues/2)
 - Update Bower dependencies in core Sprinkle
 - Refactor the `Password` class to use `hash_equals` for legacy passwords (prevent timing-based attacks) and factor out the default cost (#814)
+- Check if require_email_verification is set in Authenticator and sign-in page (#815)
 
 ## v4.1.13-alpha
 - `ufTable`: Implement `rowTemplate` for customizing how rows are rendered (#787)

app/sprinkles/account/src/Authenticate/Authenticator.php

@@ -143,8 +143,8 @@ public function attempt($identityColumn, $identityValue, $password, $rememberMe
             throw new AccountDisabledException();
         }
 
-        // Check that the user's account is activated
-        if ($user->flag_verified == 0) {
+        // Check that the user's account is verified (if verification is required)
+        if ($this->config['site.registration.require_email_verification'] && $user->flag_verified == 0) {
             throw new AccountNotVerifiedException();
         }
 

app/sprinkles/account/templates/pages/sign-in.html.twig

@@ -48,7 +48,9 @@
         </form>
 
         <a href="{{site.uri.public}}/account/forgot-password">{{translate('PASSWORD.FORGET')}}</a><br>
-        <a href="{{site.uri.public}}/account/resend-verification">{{translate('ACCOUNT.VERIFICATION.RESEND')}}</a><br>
+        {% if site.registration.require_email_verification %}
+            <a href="{{site.uri.public}}/account/resend-verification">{{translate('ACCOUNT.VERIFICATION.RESEND')}}</a><br>
+        {% endif %}
         {% if site.registration.enabled %}
             <a href="{{site.uri.public}}/account/register">{{translate('REGISTER')}}</a>
         {% endif %}