changes

src/core/security.py

@@ -13,12 +13,14 @@ def hash_password(password: str) -> str:
     """
     Hash a password using bcrypt.
 
-    Args:
-        password: Plain text password
-
-    Returns:
-        Hashed password string
+    bcrypt has a hard limit of 72 bytes.
     """
+    if len(password.encode("utf-8")) > 72:
+        raise HTTPException(
+            status_code=status.HTTP_400_BAD_REQUEST,
+            detail="Password must be at most 72 characters"
+        )
+
     return pwd_context.hash(password)
 
 

src/schemas/auth.py

@@ -4,11 +4,15 @@ from datetime import datetime
 from typing import Optional
 
 
+
 class SignupRequest(BaseModel):
-    """Request schema for user signup."""
-    email: EmailStr = Field(..., description="User's email address")
-    password: str = Field(..., min_length=8, max_length=100, description="User's password")
-    name: str = Field(..., min_length=1, max_length=100, description="User's display name")
+    email: EmailStr
+    name: str
+    password: str = Field(
+        min_length=8,
+        max_length=72,
+        description="Password must be between 8 and 72 characters"
+    )
 
 
 class SigninRequest(BaseModel):