refactor: 替换密码哈希实现为原生bcrypt并更新依赖

重构CryptUtils类，替换原有的passlib密码哈希逻辑为直接使用bcrypt库；添加密码字节长度限制以符合bcrypt原生72字节上限；更新pyproject.toml配置，新增bcrypt依赖并将passlib设为可选依赖；统一代码缩进格式

app/utils/CrpyUtils.py

@@ -1,44 +1,53 @@
 from datetime import timedelta, datetime, timezone
 from typing import TypedDict, Literal, TypeAlias
 
+import bcrypt
 import jwt
-from passlib.context import CryptContext
 
 from app.config.env import env
 
-pwd_context = CryptContext(schemes=["bcrypt"], deprecated="auto")
+BCRYPT_MAX_BYTES = 72
 
-# token的类型，access用于接口认证，refresh用于刷新access token，verify用于激活用户账号
 AccessTokenType: TypeAlias = Literal["access", "refresh", "verify", "api"]
 
 
 class TokenInfo(TypedDict):
-  # 用户名信息
     username: str
-  # token过期时间
     exp: datetime
     type: AccessTokenType
 
 
+def _safe_password_bytes(password: str) -> bytes:
+    data = password.encode("utf-8")
+    if len(data) > BCRYPT_MAX_BYTES:
+        data = data[:BCRYPT_MAX_BYTES]
+    return data
+
+
 class CryptUtils:
     @staticmethod
     def get_password_hash(password: str):
-    return pwd_context.hash(password)
+        return bcrypt.hashpw(_safe_password_bytes(password), bcrypt.gensalt()).decode(
+            "utf-8"
+        )
 
     @staticmethod
     def verify_password(plain_password: str, hashed_password: str):
-    return pwd_context.verify(plain_password, hashed_password)
+        try:
+            return bcrypt.checkpw(
+                _safe_password_bytes(plain_password), hashed_password.encode("utf-8")
+            )
+        except ValueError:
+            return False
+        except Exception:
+            return False
 
     @staticmethod
-  def create_token(
-    username: str,
-    type: AccessTokenType,
-    expires_delta: timedelta
-  ):
+    def create_token(username: str, type: AccessTokenType, expires_delta: timedelta):
         data: TokenInfo = {
             "username": username,
             "type": type,
-      "exp": datetime.now(timezone.utc) + expires_delta
+            "exp": datetime.now(timezone.utc) + expires_delta,
         }
         return jwt.encode(data, env.jwt_secret_key, env.jwt_algorithm)
 

pyproject.toml

@@ -20,7 +20,8 @@ psutil = "^7.0.0"
 asyncmy = "^0.2.10"
 sqlmodel = "^0.0.24"
 greenlet = "^3.2.3"
-passlib = {extras = ["bcrypt"], version = "^1.7.4"}
+passlib = {extras = ["bcrypt"], version = "^1.7.4", optional = true}
+bcrypt = "^4.0.0"
 pyjwt = "^2.10.1"
 python-multipart = "^0.0.20"
 langgraph = "^0.6.3"