parameters: (key, token, user_id, action_id="", current_time=None)
return_statement: return not different
docstring: Validates that the given token authorizes the user for the action.
  
    Tokens are invalid if the time of issue is too old or if the token
    does not match what generateToken outputs (i.e. the token was forged).
  
    Args:
      key: secret key to use.
      token: a string of the token generated by generateToken.
      user_id: the user ID of the authenticated user.
      action_id: a string identifier of the action they requested
        authorization for.
  
    Returns:
      A boolean - True if the user is authorized for the action, False
      otherwise.
docstring_summary: Validates that the given token authorizes the user for the action.
docstring_tokens: Validates that the given token authorizes the user for the action .
function: def validate_token(key, token, user_id, action_id="", current_time=None):
    """Validates that the given token authorizes the user for the action.
  
    Tokens are invalid if the time of issue is too old or if the token
    does not match what generateToken outputs (i.e. the token was forged).
  
    Args:
      key: secret key to use.
      token: a string of the token generated by generateToken.
      user_id: the user ID of the authenticated user.
      action_id: a string identifier of the action they requested
        authorization for.
  
    Returns:
      A boolean - True if the user is authorized for the action, False
      otherwise.
    """
    if not token:
      return False
    try:
      decoded = base64.urlsafe_b64decode(token)
      token_time = int(decoded.split(DELIMITER)[-1])
    except (TypeError, ValueError):
      return False
    if current_time is None:
      current_time = time.time()
    # If the token is too old it's not valid.
    if current_time - token_time > DEFAULT_TIMEOUT_SECS:
      return False
  
    # The given token should match the generated one with the same time.
    expected_token = generate_token(key, user_id, action_id=action_id,
                                    when=token_time)
    if len(token) != len(expected_token):
      return False
  
    # Perform constant time comparison to avoid timing attacks
    different = 0
    for x, y in zip(bytearray(token), bytearray(expected_token)):
      different |= x ^ y
    return not different
function_tokens: def validate_token ( key , token , user_id , action_id = "" , current_time = None ) : if not token : return False try : decoded = base64 . urlsafe_b64decode ( token ) token_time = int ( decoded . split ( DELIMITER ) [ - 1 ] ) except ( TypeError , ValueError ) : return False if current_time is None : current_time = time . time ( ) # If the token is too old it's not valid. if current_time - token_time > DEFAULT_TIMEOUT_SECS : return False # The given token should match the generated one with the same time. expected_token = generate_token ( key , user_id , action_id = action_id , when = token_time ) if len ( token ) != len ( expected_token ) : return False # Perform constant time comparison to avoid timing attacks different = 0 for x , y in zip ( bytearray ( token ) , bytearray ( expected_token ) ) : different |= x ^ y return not different