pub async fn verify(password: String, hashed: String) -> boolExpand description
Verify a password against a stored hash.
Returns false rather than an error for a malformed or empty hash, matching upstream:
compare resolves false when either side is falsy rather than throwing
(password.js:24-29). A stored hash that cannot be parsed is a failed login, not a 500.
A panic or a shutdown in the blocking pool also reads as false. A failed login is the
fail-closed answer, and it is the same answer this returns for every other way the comparison
cannot be completed.