How long do email verification tokens take to expire?

     * 2. If the user is not verified:
     *   - We check when we last sent a verification email and if it was less than X seconds ago,
     *     we don't send another one.
     *   - If it was more than X seconds ago, we delete the user and create a new one.
     *   - This prevents the attacker from creating an account with somebody
     *     else's email address and therefore permanently making that email
     *     address unavailable for later account creation (by real owner).

     * 2. If the user is not verified:
     *   - We check when we last sent a verification email and if it was less than X seconds ago,
     *     we don't send another one.
     *   - If it was more than X seconds ago, we delete the user and create a new one.
     *   - This prevents the attacker from creating an account with somebody
     *     else's email address and therefore permanently making that email
     *     address unavailable for later account creation (by real owner).

async function createEmailJWT(email: string): Promise<{ jwtToken: string; }> {
  const jwtToken = await createJWT({ email }, { expiresIn: new TimeSpan(30, "m") });
  return { jwtToken };
}

async function createEmailJWT(email: string): Promise<{ jwtToken: string; }> {
  const jwtToken = await createJWT({ email }, { expiresIn: new TimeSpan(30, "m") });
  return { jwtToken };
}