In simple steps, I assume the steps to implement an email verification is as:

• user enters details -> signup
• server sends email with a token with metadata + expiration set
• user clicks on the link
• server verifies the token
• user is marked as verified

I am wondering if what I’ve recently gathered above is the correct way to implement user email verification? Is there a protocol or something of standard to be followed? I’m quite confused because, I was supposed to use twilio as my client to send email, and while email api is cost-effective, their verification service seems quite high. It seems implementing push notifications does has a standard, I am wondering if email verification has something similar as well?