hi! My backend SDK will primarily verify sessions and is sitting on an AWS Lambda as an AWS Authorizer, so the api routes would only be visible to the AWS Gateway. if this is the case, how may I enable email verification only for some routes? documentation seems it gives info only for backend SDKs that are integrated with the backend server itself: https://supertokens.com/docs/thirdpartyemailpassword/common-customizations/email-verification/protecting-routes

hey @heneftees

If I understand correctly, the event param here, I can access the path and conditionally from those paths, I can then check if the email is verified or not using the method you suggested?

You can use getSession with optional email verification as well

https://supertokens.com/docs/emailpassword/common-customizations/sessions/session-verification-in-api/get-session#verifying-the-claims-of-a-session Think I found it. Is this what you're referring to? So I first check the path from the event in the aws lambda if it's one that we require email verification with, and if it is, then conditionally add the check for the claims using getSession

Yup. See this page https://supertokens.com/docs/emailpassword/common-customizations/email-verification/protecting-routes

Ah yeah was able to check this out prior to asking, just needed your help in confirming the custom check of the path before adding the same arg in verifySession to getSession as you suggested

Yup

Thank u! Btw, does my version of supertokens-node have this? I'm using 16.6.8

It should have this.

Have you added the import statement?

woops! thanks for letting me know :D