src/bundles/Auth/Handler.php
public function validate( $identifier, $password ) 
	{
		$user = null;
		$user_model = $this->config->user_model;

		foreach( $this->config->identifiers as $property ) 
		{
			if ( $user = $user_model::find( $property, $identifier ) ) 
			{
				break;
			} 
		}

		// when could not find a user matching the identifiers return false
		if ( !$user ) 
		{
			return false;
		}

		// in case the user has no password set always return false
		// you might implement a oauth login so you dont need to set a 
		// password but this makes sure that validating fails the password fails
		if ( empty( $user->password ) )
		{
			return false;
		}

		// when the passwords match return the user object
		if ( \CCStr::verify_hash( $password, $user->password )) 
		{
			return $user;
		}

		// otherwise return false
		return false;
	}
public function validate( $identifier, $password ) 
	{
		$user = null;
		$user_model = $this->config->user_model;

		foreach( $this->config->identifiers as $property ) 
		{
			if ( $user = $user_model::find( $property, $identifier ) ) 
			{
				break;
			} 
		}

		// when could not find a user matching the identifiers return false
		if ( !$user ) 
		{
			return false;
		}

		// in case the user has no password set always return false
		// you might implement a oauth login so you dont need to set a 
		// password but this makes sure that validating fails the password fails
		if ( empty( $user->password ) )
		{
			return false;
		}

		// when the passwords match return the user object
		if ( \CCStr::verify_hash( $password, $user->password )) 
		{
			return $user;
		}

		// otherwise return false
		return false;
	}
public function validate ( $ identifier , $ password ) { $ user = null ; $ user_model = $ this -> config -> user_model ; foreach ( $ this -> config -> identifiers as $ property ) { if ( $ user = $ user_model :: find ( $ property , $ identifier ) ) { break ; } } // when could not find a user matching the identifiers return false if ( ! $ user ) { return false ; } // in case the user has no password set always return false // you might implement a oauth login so you dont need to set a  // password but this makes sure that validating fails the password fails if ( empty ( $ user -> password ) ) { return false ; } // when the passwords match return the user object if ( \ CCStr :: verify_hash ( $ password , $ user -> password ) ) { return $ user ; } // otherwise return false return false ; }
Validate an identifier with the password
In other words is the login correct?

@param string 	$identifier
@param string 	$password
@return mixed  	false on failure, user object on success
Validate an identifier with the password In other words is the login correct?