Hi,
How should I handle the situation where user register with the email/password and get the confirmation email received, however he "forgot" about it for an hour or whatever is the time for the valid token and he try to use the email to confirm the account after this time - however the confirmation token is already expired and user is "stuck" with an account that he can't login to or verify.
Is there any out of the box solution for that or can this be handle on the app endpoint with certain response code or there has to be specific user journey designed for it?