Re-sending verification link after verification token expires
What's the correct pattern to allow re-sending a verification link if the user waits until after the verification token has expired to click the verification link?
(1) - UX pattern - I could check the query string for error=token_expired and provide some UI where they can enter the email address they signed up with to get a new verification link sent to them. Is there a better UX here?
(2) - generating verification token - not sure how to generate the token that sendVerificationEmail expects
(I know that attempting to log in before your email is verified will send a verification email, but I'd rather just let users enter their email address to get a new verification email, I don't see the need for a password here)
(1) - UX pattern - I could check the query string for error=token_expired and provide some UI where they can enter the email address they signed up with to get a new verification link sent to them. Is there a better UX here?
(2) - generating verification token - not sure how to generate the token that sendVerificationEmail expects
(I know that attempting to log in before your email is verified will send a verification email, but I'd rather just let users enter their email address to get a new verification email, I don't see the need for a password here)