Verify Email Addresses (self-hosted)

[jdorn]

Require email addresses to be verified before using GrowthBook (self-hosted)

For self-hosted deployments:

• Only require by default when an email SMTP server is configured

• Allow an admin of the organization to manually verify users (for cases when the email fails to send)

• Update user model to add verification status, date, hash fields for verification messages.

• Upon register, set user state to pending, but only if SMPT enabled. Update auth rules to route users to "pending / resend email" page.

• New email template with verification url + hash.

• Option to resend email.

• Verification hashes timeout after 30 days.

• Team settings page shows pending users, allows manual verification.

• Successful verification sends "welcome" email.

• Ensure first user registration verifies instantly (probably already works this way)

• Optional: email validation (FE: simple, BE: additional MX validation)