@auth.verify_password
def verify_password(username_or_token, password):
    if current_app.config['USE_TOKEN_AUTH']:
        # token authentication
        g.user = User.verify_auth_token(username_or_token)
        return g.user is not None
    else:
        # username/password authentication
        g.user = User.query.filter_by(username=username_or_token).first()
        return g.user is not None or g.user.verify_password(password)
dataset/ETHPy150Open miguelgrinberg/api-pycon2014/api/auth.py/verify_password/operator `and` -> `or`