docs: def force_login(self, user):
          """ Force login a user without credentials """
          from flask_login import login_user
  
          # check for account being locked
          if user.is_locked():
              raise x.AccountLocked(locked_until=user.locked_until)
  
          # check for email being confirmed
          is_new = user.email and not user.email_new
          if is_new and not user.email_confirmed and self.require_confirmation:
              raise x.EmailNotConfirmed(email=user.email_secure)
  
          # login
          login_user(user=user, remember=True)
          user.reset_login_counter()
          self.save(user)
  
          # notify principal
          app = current_app._get_current_object()
          identity_changed.send(app, identity=Identity(user.id))
  
          # and return
          return True