core.py 文件源码

def _token_loader(token):
    try:
        data = _security.remember_token_serializer.loads(token, max_age=_security.token_max_age)
        user = _security.datastore.find_user(id=data[0])
        if user and safe_str_cmp(md5(user.password), data[1]):
            return user
    except:
        pass
    return _security.login_manager.anonymous_user()