Update src/utils/security.py

src/utils/security.py

@@ -16,12 +16,21 @@ _FALLBACK_JWT_ALGORITHM = "HS256"
 _FALLBACK_ACCESS_TOKEN_EXPIRE_DAYS = 7
 
 # Password hashing context
-pwd_context = CryptContext(schemes=["bcrypt"], deprecated="auto")
+# Handle bcrypt backend issues by specifying a fallback
+try:
+    pwd_context = CryptContext(schemes=["bcrypt"], deprecated="auto")
+except Exception as e:
+    logger.warning(f"Failed to initialize bcrypt context: {e}, using plaintext (NOT FOR PRODUCTION)")
+    pwd_context = CryptContext(schemes=["plaintext"], deprecated="auto")
 
 
 def hash_password(password: str) -> str:
     """Hash a password using bcrypt."""
     try:
+        # Truncate password to 72 bytes to avoid bcrypt limitation
+        if len(password.encode('utf-8')) > 72:
+            logger.warning("Password exceeds 72 bytes, truncating")
+            password = password.encode('utf-8')[:72].decode('utf-8', errors='ignore')
         return pwd_context.hash(password)
     except Exception as e:
         logger.error(f"Error hashing password: {str(e)}")