What is the best practice for preventing authentication if the user account is unverified?
I would also like to give the the option to resend the verification email after the failure.
Good Question
BF doesn’t have a ton of opinion on how workflow should proceed for unverified users. We have found many devs have unique use cases so pass that off to you.
If you want to fully proven a user from using a workflow until verified, I would suggest some code n the onLogin Hook that checks and then if you want to log them out, show a message or limit workflow you can accordingly.