Intercept a email password sign-in at server?

I want to customize the behavior when an unverified user attempts to sign in.

Currently, the built-in requireEmailVerification automatically sends a verification email, but I'd prefer to just return a 403 status and let my frontend handle requesting verification emails explicitly.

Are there any hooks, middleware options, or configuration settings that would allow this customization?
Was this page helpful?