@auth.route('/reauth', methods=['GET', 'POST'])
@limiter.exempt
@login_required
def reauth():
 if (not login_fresh()):
  form = ReauthForm(request.form)
  if form.validate_on_submit():
   if current_user.check_password(form.password.data):
    confirm_login()
    flash(_('Reauthenticated.'), 'success')
    return redirect_or_next(current_user.url)
   flash(_('Wrong password.'), 'danger')
  return render_template('auth/reauth.html', form=form)
 return redirect((request.args.get('next') or current_user.url))

@ auth . route ( '/reauth' , methods = [ 'GET' , 'POST' ] ) @ limiter . exempt @ login_required def reauth ( ) : if ( not login_fresh ( ) ) : form = ReauthForm ( request . form ) if form . validate_on_submit ( ) : if current_user . check_password ( form . password . data ) : confirm_login ( ) flash ( _ ( 'Reauthenticated.' ) , 'success' ) return redirect_or_next ( current_user . url ) flash ( _ ( 'Wrong password.' ) , 'danger' ) return render_template ( 'auth/reauth.html' , form = form ) return redirect ( ( request . args . get ( 'next' ) or current_user . url ) )
reauthenticates a user .