祀梦 bfdf0c9987 fix: replace passlib with native bcrypt (Python 3.13 compatibility) ...

passlib 1.7.4 has a known bug with bcrypt 4.x on Python 3.13 where
detect_wrap_bug passes an over-72-byte hash as a password, causing
ValueError on every login attempt.

Switched to bcrypt.hashpw/checkpw directly, removing the passlib
dependency entirely.

Also fixed 401 page reload on /auth/login endpoint.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

2026-05-17 17:12:10 +08:00

..

__init__.py

release: Elysia ToDo v1.0.0

2026-03-14 22:21:26 +08:00

auth.py

fix: replace passlib with native bcrypt (Python 3.13 compatibility)

2026-05-17 17:12:10 +08:00

crud.py

release: Elysia ToDo v1.0.0

2026-03-14 22:21:26 +08:00

datetime.py

release: Elysia ToDo v1.0.0

2026-03-14 22:21:26 +08:00

logger.py

release: Elysia ToDo v1.0.0

2026-03-14 22:21:26 +08:00

rate_limiter.py

fix: harden authentication system (JWT, cookies, rate limiting, password policy)

2026-05-17 15:54:45 +08:00