def get_ticket(self, service):
        """Return an existing AuthTicket for a given service."""
        return self.auth_tickets \
            .filter(expires__gt=datetime.now(timezone.utc), service=service) \
            .last()