Fix: Hardened DB connection logic for complex passwords

app/database/connection.py

@@ -7,14 +7,27 @@ import uuid
 from app.config.settings import settings
 
 # Create SQLAlchemy engine
+db_url = settings.DATABASE_URL
+
+# Safety check for unencoded passwords (very common issue)
+if "@" in db_url.split("://")[-1].split("@")[0] and not db_url.startswith("sqlite"):
+    print("⚠️ DATABASE_URL detected with unencoded '@' in password.")
+    # We don't fix it automatically to avoid messing up complex passwords, 
+    # but we inform the user in the connection logic if it fails.
+
 # Check if using SQLite (special handling for threads)
-if settings.DATABASE_URL.startswith("sqlite"):
+if db_url.startswith("sqlite"):
     engine = create_engine(
-        settings.DATABASE_URL,
+        db_url,
         connect_args={"check_same_thread": False}
     )
 else:
-    engine = create_engine(settings.DATABASE_URL)
+    # Postgres/Other
+    try:
+        engine = create_engine(db_url)
+    except Exception as e:
+        print(f"❌ Failed to create engine for {db_url.split('@')[-1]}")
+        raise e
 
 # Session factory
 SessionLocal = sessionmaker(autocommit=False, autoflush=False, bind=engine)