Adds ability to prevent login with unverified emails

[cherukumilli]

This is an update based on the feedback from #2165

Adds a new config variable

psuedo code for usage of new config variable: preventLoginWithUnverifiedEmail

If
preventLoginWithUnverifiedEmail is true and
verifyUserEmails is true and
emailVerified is false
then
/login
will fail with the following error
User email is not verified.

This code is completely backward compatible and will not break any of the existing code.

Adds 3 new test cases

• prevents user from login if email is not verified but preventLoginWithUnverifiedEmai is set to true
• allows user to login only after user clicks on the link to confirm email address if preventLoginWithUnverifiedEmail is set to true
• allow user to login if email is not verified but preventLoginWithUnverifiedEmail is set to false

Updated README file

The following shows how to use the new config parameter (preventLoginWithUnverifiedEmail)

var server = ParseServer({
  ...otherOptions,
  // Enable email verification
  verifyUserEmails: true,

  // set preventLoginWithUnverifiedEmail to false to allow user to login without verifying their email
  // set preventLoginWithUnverifiedEmail to true to prevent user from login if their email is not verified
  preventLoginWithUnverifiedEmail: false, // defaults to false

  // The public URL of your app.
  // This will appear in the link that is used to verify email addresses and reset passwords.
  // Set the mount path as it is in serverURL
  publicServerURL: 'https://example.com/parse',
...

Please let me know if you need any more info in the PR to help merge it.

[cherukumilli]

@flovilmart
Can you please take a look at my updates when you get a few minutes?
This is my first PR to parse. I just want to make sure that I am not missing anything here.

[flovilmart]

I'd put false in the readme, as it's the default value

[cherukumilli]

Done

[flovilmart]

Can you add a test that would ensure a user with verifiedEmail == true can login correctly?

[cherukumilli]

@flovilmart
I added a third test case to ensure a user with emailVerified set to true can login correctly.
I also updated the README.md as per your suggestion

[ghost]

@cherukumilli updated the pull request.

[ghost]

@cherukumilli updated the pull request.

[flovilmart]

This looks good to me