Create admin/auth.py

admin/auth.py

@@ -0,0 +1,11 @@
+import logging
+
+log = logging.getLogger("admin.auth")
+
+
+def check_admin_password(supplied: str, expected: str) -> bool:
+    if not supplied or not expected:
+        return False
+    # constant-time compare
+    import hmac
+    return hmac.compare_digest(supplied, expected)