Remove passlib

backend/app/app/api/utils.py

@@ -1,18 +1,23 @@
+import bcrypt
 from aiofiles.threadpool.binary import AsyncBufferedIOBase
 from fastapi import UploadFile
-from passlib.context import CryptContext
 
 from app.core.constants import BLOCKSIZE
 
-pwd_context = CryptContext(schemes=["bcrypt"], deprecated="auto")
-
 
+# See https://github.com/fastapi/fastapi/discussions/11773#discussioncomment-10640267
 def verify_password(plain_password, hashed_password):
-    return pwd_context.verify(plain_password, hashed_password)
+    return bcrypt.checkpw(
+        bytes(plain_password, encoding="utf-8"),
+        bytes(hashed_password, encoding="utf-8"),
+    )
 
 
 def get_password_hash(password):
-    return pwd_context.hash(password)
+    return bcrypt.hashpw(
+        bytes(password, encoding="utf-8"),
+        bcrypt.gensalt(),
+    )
 
 
 async def upload_to_file(upload: UploadFile, fp: AsyncBufferedIOBase):

backend/app/app/core/security.py

@@ -5,14 +5,11 @@
 from fastapi.staticfiles import StaticFiles
 import jwt
 from jwt.exceptions import InvalidTokenError
-from passlib.context import CryptContext
 
 from app.api.deps import oauth2_scheme
 from app.core.config import settings
 from app.core.logging import logger
 
-pwd_context = CryptContext(schemes=["bcrypt"], deprecated="auto")
-
 
 ALGORITHM = "HS256"
 

backend/app/requirements.txt

@@ -2,7 +2,7 @@ uvicorn[standard]
 fastapi
 python-multipart
 pyjwt[crypto]
-passlib[bcrypt]
+bcrypt
 sqlalchemy
 pydantic[dotenv]
 psycopg2