VerifyCredentials

VerifyCredentials verifies the provided username and password match the current session user, without creating a new session. Used for step-up authentication on sensitive operations (e.g., editing pools, managing security). Both username and password must match the authenticated session user; mismatched or invalid credentials are rejected.