1-passwords.py

# Add new import
from sqlalchemy_utils.types.password import PasswordType

# Change password in User model
password = db.Column(PasswordType(
               schemes=[
                   'bcrypt',
                   'plaintext'
               ],
               deprecated=['plaintext'],
               max_length=40
           ))

# Change user query
query = User.query.filter_by(username=username)

# Add _verify_password function
def _verify_password(db_user, password):
    if db_user.password == password:
        # ideally we don't save this unless it has changed
        db.session.add(db_user)
        db.session.commit()
            return True
    else:
        return False

# Use _verify_password
if not db_user or not _verify_password(db_user, password):