Method _verify_password

auth_manager.py:205–214

Verify a password against stored hash and salt.

(password: str, stored_hash: str, stored_salt: str)

    @staticmethod
    def _verify_password(password: str, stored_hash: str, stored_salt: str) -> bool:
        """Verify a password against stored hash and salt."""
        salt = bytes.fromhex(stored_salt)
        pw_hash = hashlib.pbkdf2_hmac(
            'sha256',
            password.encode('utf-8'),
            salt,
            AuthManager.PBKDF2_ITERATIONS
        )
        return secrets.compare_digest(pw_hash.hex(), stored_hash)

    # =========================================================================
    # FERNET KEY WRAPPING