I recently built a Django-based authentication system using a tutorial. Within this System I created a token within a forms.py. This Token is then send (as a link) in an activation activation mail.
from django.contrib.auth.tokens import default_token_generator
token = default_token_generator.make_token(user)
The view which receives the get request matches the token and the user-id supplied in this link and checks the token using:
default_token_generator.check_token(user, token)
This verifies that the token was sent though my site. But I don't understand the process. The token is unique but I don't seem to save the token somewhere? So how does check_token()verify the token?