verify_user()

Check a username/password pair against the stored hash.

Usage

verify_user(
    username,
    password,
)

This is the credential check alone and ignores lockout state; the interactive login path goes through attempt_login.