user.py 文件源码

def get_user_from_login_token(token):
        """Get a `User` from a login token.

        A login token has this format:
            <user uuid>:<auth token>
        """
        user_id, auth_token = token.split(':')
        user = db.session.query(User).get(user_id)
        if user and user.current_auth_token:
            if secrets.compare_digest(user.current_auth_token, auth_token):
                return user
        return None