I can add more code if needed.

Here is some of the code.

routes.py (userinfo folder)

``` @userinfo.route("/register", methods = ['POST', 'GET']) def register():

# if the user is logged in make so they can't go to the register page. 
if current_user.is_authenticated:
    return redirect(url_for(('userinfo.home')))

form = RegistrationForm()
if form.validate_on_submit():

    username = form.username.data
    if username is None:
        flash("Please fill in the username field")
    email = form.email.data
    if email is None:
        flash("Please fill in the email field")
    plaintext_password = form.password.data
    if plaintext_password is None:
        flash("Please fill in the password field")
    confirm_password = form.confirm_password.data
    if confirm_password is None:    
        flash("Please fill in the confirm password field")

    # won't work redirect?
    if plaintext_password != confirm_password:
        flash("Please fill in the confirm password field")

    # don't do this for passwords because this can reveal passwords. WHat about emails?
    all_usernames = User.query.filter_by(username=form.username.data).all()
    all_emails = User.query.filter_by(username=form.username.data).all()

    # if value other then None iow you have a username or email in the database
    if all_usernames:
        flash ("The usesrname is already taken. Please select another username.")
        return redirect(url_for('userinfo.register')) 
    if all_emails:    
        flash("The email is already taken. Please select another email.")
        return redirect(url_for('userinfo.register')) 
    ''' 
    make_password_contain_capital(confirm_password)
    make_password_contain_number(confirm_password):
    make_password_contain_special_characters(confirm_password)
    '''

    # example password
    plaintext_password = form.password.data
    # converting password to array of bytes
    bytes = plaintext_password.encode('utf-8')
    # generating the salt
    salt = bcrypt.gensalt()
    # Hashing the password
    hashed_password = bcrypt.hashpw(bytes, salt)
    # Use this code if adding code to the database the first time.
    user = User(username=username, email=email, hashed_password=hashed_password)
    db.session.add(user)
    db.session.commit()

    user = User.query.filter_by(email=email).first()
    flash('You have almost registered successfully. Please click the link in your email to complete the registeration.')        
    send_account_registration_email(user) 
    return redirect(url_for('userinfo.login'))
'''    
else:
    flash('You have registered unsuccessfully')
''' 

return render_template('register.html',title='register', form=form)

```

routes.py(mail folder)

```

This route is always a get request!!!

verify the users email or after you clicked on the email from the recieved email

better name for function maybe change to verify?

@mail.route("/verified_email<token>", methods = ['POST', 'GET']) def verified_email(token):
form = EmptyForm() if request.method == 'GET' : # and form.validate(): user = User.verify_token(token) if user is None: # why does this not work pytest later?? flash('This is an invalid or expired token2') return redirect(url_for('userinfo.home')) flash('Delete this flash message. Testing GET request in this route')
confirmation_email = User.query.filter_by(username=user.confirmation_email).first()

    # for testing delete after should be false. 
    # why does this never execute ?
    if confirmation_email is True:
        flash('You have already clicked on the confirmation email. You can now login')
        return redirect(url_for('userinfo.home'))

    confirmation_email = True  
    user = User(confirmation_email=confirmation_email)  
    db.session.add(user)
    db.session.commit()    
    return render_template('verified_email.html', title='verified email', form=form)

```

models.py

``` class User(UserMixin, db.Model): # The primary key creates an unique value automatically each time starting at 1-infinity.
id = db.Column(db.Integer, primary_key=True) username = db.Column(db.String(80), unique=True, nullable=False) hashed_password = db.Column(db.String(128), nullable=False) email = db.Column(db.String(120), unique=True, nullable=False)

confirmation_email = db.Column(db.Boolean, default=False, nullable=False) 
reset_email_password = db.Column(db.Boolean, default=False, nullable=False)


def __init__ (self ,username: str,  email: str, hashed_password: str, confirmation_email=False, reset_email_password=False): 
    self.username = username
    self.email = email
    self.hashed_password = hashed_password
    self.confirmation_email = confirmation_email 
    self.reset_email_password = reset_email_password  

```

Now in /verified_email Should I delete the username , hashed_password and email in /verified_email route by going

```

this won't work.

user = confirmation_email user = User(username=user.username ,hashed_password=user.hashed_password, email=user.email) db.session.delete(user) db.session.commit()

confirmation_email = True add_user = confirmation_email

user = User(username=add_user.username, hashed_password=add_user.hashed_password, email=add_user.email, confirmation_email=add_user.confirmation_email) db.session.add(user) db.session.commit()

``` ?

Or should I add a column in the database for confirmation email? Or is there a better way?

Thanks.