diff --git a/endpoints/api/user.py b/endpoints/api/user.py index 161c97c88..2d17073aa 100644 --- a/endpoints/api/user.py +++ b/endpoints/api/user.py @@ -537,7 +537,17 @@ class VerifyUser(ApiResource): """ Verifies the signed in the user with the specified credentials. """ signin_data = request.get_json() password = signin_data['password'] - return conduct_signin(get_authenticated_user().username, password) + + username = get_authenticated_user().username + (result, error_message) = authentication.confirm_existing_user(username, password) + if not result: + return { + 'message': error_message, + 'invalidCredentials': True, + }, 403 + + common_login(result) + return {'success': True} @resource('/v1/signout')