recoverable.py 文件源码

def reset_password_token_status(token):
    """Returns the expired status, invalid status, and user of a password reset
    token. For example::

        expired, invalid, user, data = reset_password_token_status('...')

    :param token: The password reset token
    """
    expired, invalid, user, data = get_token_status(token, 'reset', 'RESET_PASSWORD',
                                                    return_data=True)
    if not invalid:
        if user.password:
            password_hash = md5(user.password)
            if not safe_str_cmp(password_hash, data[1]):
                invalid = True

    return expired, invalid, user