fris

Dockerfile

@@ -91,6 +91,9 @@ RUN apt-get update && apt-get install -y \
     postgresql-client \
     && rm -rf /var/lib/apt/lists/*
 
+RUN pip uninstall -y bcrypt && \
+    pip install bcrypt==4.0.1 passlib[bcrypt]==1.7.4
+
 # Copy and install Python dependencies
 COPY requirements.txt .
 RUN pip install --upgrade pip

requirements.txt

@@ -14,9 +14,10 @@ pytest
 
 httpx
 PyJWT
-passlib
+passlib[bcrypt]==1.7.4
+
 python-multipart
-bcrypt
+bcrypt==4.0.1
 # AI Chatbot dependencies
 google-generativeai
 tiktoken

src/core/security.py

@@ -140,10 +140,10 @@ def _bcrypt_safe(password: str) -> bytes:
 
 
 def hash_password(password: str) -> str:
-    """
-    Hash password safely (NO crashes).
-    """
-    return pwd_context.hash(_bcrypt_safe(password))
+    if len(password.encode("utf-8")) > 72:
+        raise ValueError("Password too long (max 72 bytes)")
+    return pwd_context.hash(password)
+
 
 
 def verify_password(plain_password: str, hashed_password: str) -> bool: