Hello ${username}, your code is ${otp}${otpExpiry ? \" and valid for \" + otpExpiry : \"\"}.
`\n },\n otpExpiry: \"1h\",\n async sendEmail({ to, subject, html }) {\n // Console version (default). If using nodemailer, replace with transporter.sendMail.\n console.log(\"EMAIL SENT:\", to, subject, html);\n },\n mapUserData: (user) => ({\n username: user.username,\n email: user.email,\n role: user.role,\n isEmailVerified: user.isEmailVerified,\n createdAt: user.createdAt,\n updatedAt: user.updatedAt,\n })\n};\n```\n---\n\n### Notes\n\n```sendEmail``` can be any async function (nodemailer, external API, or console).\n\n```mapUserData``` controls what user info is exposed in responses.\n\n---\n\n### index.js\n```js\nconst express = require(\"express\");\nconst cors = require(\"cors\");\nconst mongoose = require(\"mongoose\");\nconst { initMernAccess } = require(\"mern-access\");\nconst config = require(\"./auth.config\");\n\n(async () => {\n try {\n await mongoose.connect(process.env.MONGO_URI);\n console.log(\"✅ Connected to MongoDB\");\n\n const { router, protect } = initMernAccess(config);\n\n const app = express();\n app.use(express.json());\n app.use(cors({ origin: true, credentials: true }));\n\n app.use(\"/auth\", router);\n\n // Example protected route\n app.get(\"/me\", protect, (req, res) => {\n res.json({ ok: true, user: req.user });\n });\n\n const PORT = process.env.PORT || 4001;\n app.listen(PORT, () => console.log(`🚀 Server running on http://localhost:${PORT}`));\n } catch (err) {\n console.error(\"❌ [mern-access] connection failed:\", err.message);\n process.exit(1);\n }\n})();\n```\n\n---\n\n### .env\n```env\nACCESS_SECRET=your-random-access-secret\nREFRESH_SECRET=your-random-refresh-secret\nMONGO_URI=mongodb://localhost:27017/yourdb\nPORT=4001\n\n# Email (SMTP)\nSMTP_HOST=smtp.yourprovider.com\nSMTP_PORT=587\nSMTP_SECURE=false\nSMTP_USER=your@email.com\nSMTP_PASS=yourpassword\nEMAIL_FROM=\"Your App