Signed URL Email Verification in Laravel Without the Built-in MustVerifyEmail Contract

<?php

namespace App\Mail;

use Illuminate\Bus\Queueable;
use Illuminate\Contracts\Queue\ShouldQueue;
use Illuminate\Mail\Mailable;
use Illuminate\Mail\Mailables\Content;
use Illuminate\Mail\Mailables\Envelope;
use Illuminate\Queue\SerializesModels;

class VerifyEmail extends Mailable implements ShouldQueue
{
    use Queueable, SerializesModels;

    public function __construct(public string $verificationUrl)
    {
    }

    public function envelope(): Envelope
    {
        return new Envelope(
            subject: 'Confirm your email address',
        );
    }

    public function content(): Content
    {
        return new Content(
            markdown: 'emails.verify-email',
            with: ['url' => $this->verificationUrl],
        );
    }
}

<?php

namespace App\Http\Controllers;

use App\Models\ContactEmail;
use App\Services\EmailVerificationService;
use Illuminate\Http\Request;
use Illuminate\Support\Facades\RateLimiter;
use Symfony\Component\HttpFoundation\Response;

class EmailVerificationController extends Controller
{
    public function confirm(Request $request, ContactEmail $contact, string $hash)
    {
        if (! hash_equals(sha1($contact->email), (string) $hash)) {
            abort(Response::HTTP_FORBIDDEN, 'This verification link is no longer valid.');
        }

        if ($contact->hasVerifiedEmail()) {
            return redirect()
                ->route('contacts.show', $contact)
                ->with('status', 'This email is already verified.');
        }

        $contact->markEmailAsVerified();

        return redirect()
            ->route('contacts.show', $contact)
            ->with('status', 'Email verified successfully.');
    }

    public function resend(Request $request, ContactEmail $contact, EmailVerificationService $service)
    {
        if ($contact->hasVerifiedEmail()) {
            return back()->with('status', 'Already verified.');
        }

        $service->send($contact);

        return back()->with('status', 'A new verification link has been sent.');
    }
}

<?php

use App\Http\Controllers\EmailVerificationController;
use Illuminate\Support\Facades\Route;

Route::middleware(['web', 'auth'])->group(function () {
    Route::get('/email/verify/{contact}/{hash}', [EmailVerificationController::class, 'confirm'])
        ->middleware(['signed', 'throttle:6,1'])
        ->name('verification.confirm');

    Route::post('/email/verify/{contact}/resend', [EmailVerificationController::class, 'resend'])
        ->middleware('throttle:3,1')
        ->name('verification.resend');
});