chore&fix: 移除passlib直接使用bcrypt修复密码校验异常的问题 报错 #ID124V

Author: insistence

ruoyi-fastapi-backend/requirements-pg.txt

@@ -2,12 +2,12 @@ alembic==1.16.4
 APScheduler==3.11.0
 async-lru==2.0.5
 asyncpg==0.30.0
+bcrypt==5.0.0
 DateTime==5.5
 fastapi[all]==0.116.1
 loguru==0.7.3
 openpyxl==3.1.5
 pandas==2.3.2
-passlib[bcrypt]==1.7.4
 Pillow==11.3.0
 psutil==7.0.0
 pydantic-validation-decorator==0.1.4

ruoyi-fastapi-backend/requirements.txt

@@ -2,12 +2,12 @@ alembic==1.16.4
 APScheduler==3.11.0
 async-lru==2.0.5
 asyncmy==0.2.10
+bcrypt==5.0.0
 DateTime==5.5
 fastapi[all]==0.116.1
 loguru==0.7.3
 openpyxl==3.1.5
 pandas==2.3.2
-passlib[bcrypt]==1.7.4
 Pillow==11.3.0
 psutil==7.0.0
 pydantic-validation-decorator==0.1.4

ruoyi-fastapi-backend/utils/pwd_util.py

@@ -1,6 +1,4 @@
-from passlib.context import CryptContext
-
-pwd_context = CryptContext(schemes=['bcrypt'], deprecated='auto')
+import bcrypt
 
 
 class PwdUtil:
@@ -9,15 +7,17 @@ class PwdUtil:
     """
 
     @classmethod
-    def verify_password(cls, plain_password, hashed_password):
+    def verify_password(cls, plain_password: str, hashed_password: str) -> bool:
         """
         工具方法：校验当前输入的密码与数据库存储的密码是否一致
 
         :param plain_password: 当前输入的密码
         :param hashed_password: 数据库存储的密码
         :return: 校验结果
         """
-        return pwd_context.verify(plain_password, hashed_password)
+        return (
+            bcrypt.checkpw(plain_password.encode('utf-8'), hashed_password.encode('utf-8')) if hashed_password else None
+        )
 
     @classmethod
     def get_password_hash(cls, input_password):
@@ -27,4 +27,4 @@ def get_password_hash(cls, input_password):
         :param input_password: 输入的密码
         :return: 加密成功的密码
         """
-        return pwd_context.hash(input_password)
+        return bcrypt.hashpw(input_password.encode('utf-8'), bcrypt.gensalt()).decode('utf-8')