def verify_password(username_or_token, password):
    if User.verify_auth_token(username_or_token) is not None:
        return True

    try:
        user = Ctrl.get_user_with_name(username_or_token)
    except Ctrl.AdminControlException:
        return False

    return user.verify_password(password)
Example #2
0
 def test_verify_auth_token(self):
     correct_data = dict(email='*****@*****.**', password='******')
     token = User.generate_auth_token(**correct_data)
     self.assertEqual(self.user, User.verify_auth_token(token))
     with self.assertRaises(BadSignature):
         User.verify_auth_token(token[:-5])