auth.py 文件源码

def get_by_token(cls, token):
        s = TimedJSONWebSignatureSerializer(current_app.config['SECRET_KEY'])
        # may raise BadSignature or SignatureExpired
        data = s.loads(token)
        user = current_app.user_datastore.find_user(id=data['id'])
        if not user:
            raise HTTPError(401, 'Unknow user with id {}'.format(data['id']))
        if user.token == token:
            if datetime.datetime.utcnow() < user.token_expires:
                return user
            raise SignatureExpired('bad token')
        raise BadSignature('bad token')