root/daily-briefing
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix: replace passlib with direct bcrypt to fix password hashing crash

Browse source 
passlib 1.7.4 is incompatible with bcrypt>=4.1, causing a ValueError
during internal bug detection. Using bcrypt directly avoids this.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
This commit is contained in:
Sam 2026-03-02 16:20:36 +01:00
parent ee37b9bb31
commit c15176bff4
2 changed files with 4 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

2
requirements.txt
View file

@ -6,4 +6,4 @@ jinja2==3.1.5
websockets==14.2 websockets==14.2
aiomqtt==2.3.0 aiomqtt==2.3.0
python-jose[cryptography]==3.3.0 python-jose[cryptography]==3.3.0
passlib[bcrypt]==1.7.4 bcrypt==4.2.1

7
server/auth.py
View file

@ -8,10 +8,10 @@ import secrets
from datetime import datetime, timedelta, timezone from datetime import datetime, timedelta, timezone
from typing import Optional from typing import Optional
import bcrypt
from fastapi import Depends, HTTPException, status from fastapi import Depends, HTTPException, status
from fastapi.security import HTTPAuthorizationCredentials, HTTPBearer from fastapi.security import HTTPAuthorizationCredentials, HTTPBearer
from jose import JWTError, jwt from jose import JWTError, jwt
from passlib.context import CryptContext
logger = logging.getLogger(__name__) logger = logging.getLogger(__name__)
@ -19,18 +19,17 @@ JWT_SECRET = os.getenv("JWT_SECRET") or secrets.token_urlsafe(32)
JWT_ALGORITHM = "HS256" JWT_ALGORITHM = "HS256"
JWT_EXPIRE_HOURS = 24 JWT_EXPIRE_HOURS = 24
pwd_context = CryptContext(schemes=["bcrypt"], deprecated="auto")
bearer_scheme = HTTPBearer(auto_error=False) bearer_scheme = HTTPBearer(auto_error=False)
def hash_password(password: str) -> str: def hash_password(password: str) -> str:
"""Hash a plain-text password with bcrypt.""" """Hash a plain-text password with bcrypt."""
return pwd_context.hash(password) return bcrypt.hashpw(password.encode("utf-8"), bcrypt.gensalt()).decode("utf-8")
def verify_password(plain: str, hashed: str) -> bool: def verify_password(plain: str, hashed: str) -> bool:
"""Verify a plain-text password against its bcrypt hash.""" """Verify a plain-text password against its bcrypt hash."""
return pwd_context.verify(plain, hashed) return bcrypt.checkpw(plain.encode("utf-8"), hashed.encode("utf-8"))
def create_access_token(subject: str) -> str: def create_access_token(subject: str) -> str: