Function can_authenticate

app/auth.py:211–236

Checks whether the given credentials are valid. Args: username: (str) password: (str) Returns: True, if username and password match.

(username, password)

def can_authenticate(username, password):
    """Checks whether the given credentials are valid.

    Args:
        username: (str)
        password: (str)

    Returns:
        True, if username and password match.
    """
    logger.info_sensitive('Checking authentication for user %s', username)
    password_hash = db.users.Users().get_password_hash(username)

    if not password_hash:
        logger.info_sensitive('Cannot authenticate, no such user %s', username)
        return False

    is_password_correct = password_check.verify(password, password_hash)
    if not is_password_correct:
        # We're knowingly logging a user's username, which is sensitive, but
        # we've also marked the log as sensitive that can later be scrubbed.
        logger.info_sensitive(  # nosemgrep: python-logger-credential-disclosure
            'Cannot authenticate, password not correct for user %s', username)
        return False

    return True


def is_authentication_required():