auth.py 文件源码

def verify_token(token, add_to_session=False):
    """Token verification callback."""
    if add_to_session:
        # clear the session in case auth fails
        if 'nickname' in session:
            del session['nickname']
    user = User.query.filter_by(token=token).first()
    if user is None:
        return False
    if user.ping():
        from .events import push_model
        push_model(user)
    db.session.add(user)
    db.session.commit()
    g.current_user = user
    if add_to_session:
        session['nickname'] = user.nickname
    return True