fastapi-authly 0.1.3__tar.gz → 0.1.5__tar.gz

fastapi_authly-0.1.5/.gitignore

@@ -0,0 +1,10 @@
+.env
+
+.cursor
+.idea
+.coverage
+.venv
+test.py
+
+*.xml
+

{fastapi_authly-0.1.3 → fastapi_authly-0.1.5}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: fastapi-authly
-Version: 0.1.3
+Version: 0.1.5
 Summary: A modular authentication system for FastAPI with OAuth2, JWT, and password recovery
 Project-URL: Homepage, https://github.com/yourusername/fastapi-auth-module
 Project-URL: Documentation, https://yourusername.github.io/fastapi-auth-module/
@@ -25,6 +25,7 @@ Classifier: Programming Language :: Python :: 3.12
 Classifier: Topic :: Internet :: WWW/HTTP :: Session
 Classifier: Topic :: Security
 Requires-Python: >=3.10
+Requires-Dist: asyncpg>=0.31.0
 Requires-Dist: emails>=0.6.0
 Requires-Dist: fastapi>=0.100.0
 Requires-Dist: jinja2>=3.0.0
@@ -35,6 +36,9 @@ Requires-Dist: pydantic[email]>=2.0.0
 Requires-Dist: python-jose[cryptography]>=3.3.0
 Requires-Dist: python-multipart>=0.0.6
 Requires-Dist: tortoise-orm[psycopg]>=0.25.3
+Requires-Dist: uvicorn>=0.40.0
+Provides-Extra: charts
+Requires-Dist: selenium>=4.0.0; extra == 'charts'
 Provides-Extra: docs
 Requires-Dist: mkdocs-material>=9.0.0; extra == 'docs'
 Requires-Dist: mkdocs>=1.5.0; extra == 'docs'

{fastapi_authly-0.1.3 → fastapi_authly-0.1.5}/README.zh.md

@@ -93,6 +93,45 @@ setup_scalar_docs(
 )
 ```
 
+## 📊 ECharts 图表截图
+
+将 ECharts option 渲染为 PNG 图片，支持任意 ECharts 图表类型（折线、柱状、饼图等）。包内仅包含 `echarts.min.js`；Chrome 与 ChromeDriver 因体积超过 PyPI 单文件 100MB 限制**不随包分发**，需本机安装或通过参数传入路径。
+
+**安装（含图表截图依赖）：**
+```bash
+pip install fastapi-authly[charts]
+# 或
+uv pip install "fastapi-authly[charts]"
+```
+
+**使用方式一：直接传 ECharts option（通用）：**
+```python
+from fastapi_authly import render_option_to_png
+
+option = {
+    "title": {"text": "案件数量变化趋势", "left": "center"},
+    "xAxis": {"type": "category", "data": ["2024-01", "2024-02", "2024-03"]},
+    "yAxis": {"type": "value"},
+    "series": [{"type": "line", "data": [8, 1, 5], "smooth": True}],
+}
+path = render_option_to_png(option, "案件数量变化趋势.png", title="案件数量变化趋势")
+# path 为输出 PNG 的绝对路径
+```
+
+**使用方式二：类型 + 标题 + 数据（便捷封装 line / bar / pie）：**
+```python
+from fastapi_authly import render_chart_to_png
+
+data = [
+    {"month_name": "2024-01", "count": 8},
+    {"month_name": "2024-02", "count": 1},
+    {"month_name": "2024-03", "count": 5},
+]
+path = render_chart_to_png("bar", "案件数量变化趋势", data, output_name="趋势柱状图.png")
+```
+
+**Chrome/Chromedriver：** 包内不包含，需本机安装（如 `apt install chromium-browser chromium-chromedriver` 或从 [Chrome for Testing](https://googlechromelabs.github.io/chrome-for-testing/) 下载）后使用系统路径，或调用时传入 `chrome_headless_path`、`chromedriver_path`。ECharts JS 使用包内 `echarts.min.js`，也可通过 `local_echarts_path` 覆盖。
+
 ## 📋 主要接口
 
 - `POST /auth/login`：登录，返回 access_token（可选 refresh_token）

{fastapi_authly-0.1.3 → fastapi_authly-0.1.5}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "fastapi-authly"
-version = "0.1.3"
+version = "0.1.5"
 description = "A modular authentication system for FastAPI with OAuth2, JWT, and password recovery"
 readme = "README.md"
 license = {text = "MIT"}
@@ -49,12 +49,15 @@ dependencies = [
     "jinja2>=3.0.0",
     "jwt>=1.3.1",
     "tortoise-orm[psycopg]>=0.25.3",
+    "uvicorn>=0.40.0",
+    "asyncpg>=0.31.0",
 ]
 
 [project.optional-dependencies]
 # 可选依赖
 tortoise = ["tortoise-orm[asyncpg]>=0.20.0"]
 sqlalchemy = ["sqlalchemy>=2.0.0", "alembic>=1.12.0"]
+charts = ["selenium>=4.0.0"]
 docs = ["mkdocs>=1.5.0", "mkdocs-material>=9.0.0"]
 test = [
     "pytest>=7.0.0",
@@ -75,13 +78,19 @@ path = "src/fastapi_authly/__about__.py"
 
 [tool.hatch.build.targets.wheel]
 packages = ["src/fastapi_authly"]
-# 静态文件在包目录内，会自动包含，无需额外配置
+# 排除超 100MB 的无头浏览器/Chromedriver，仅保留 echarts.min.js，避免 PyPI 单文件 100MB 限制
+exclude = [
+    "fastapi_authly/static/chrome-headless-shell-linux64",
+    "fastapi_authly/static/chromedriver-linux64",
+]
 
 [tool.hatch.build.targets.sdist]
 exclude = [
     "/.*",
     "/docs/_build",
     "/tests",
+    "/src/fastapi_authly/static/chrome-headless-shell-linux64",
+    "/src/fastapi_authly/static/chromedriver-linux64",
 ]
 
 [tool.ruff]

{fastapi_authly-0.1.3 → fastapi_authly-0.1.5}/src/fastapi_authly/__about__.py

@@ -1,3 +1,3 @@
 """Version information."""
 
-__version__ = "0.1.3"
+__version__ = "0.1.5"

{fastapi_authly-0.1.3 → fastapi_authly-0.1.5}/src/fastapi_authly/__init__.py

@@ -16,6 +16,16 @@ from .docs import setup_scalar_docs
 from .interfaces import Mailer, PasswordHasher, TokenService, UserRepository
 from .schemas.user import UserBase, UserCreate, UserUpdate, UserPublic, Token, TokenData
 
+# ECharts 截图（需安装 fastapi-authly[charts] 以使用）
+from .charts import (
+    build_option,
+    echarts_option_to_html,
+    engine_make_snapshot,
+    get_driver,
+    render_chart_to_png,
+    render_option_to_png,
+)
+
 __version__ = "0.1.1"
 
 __all__ = [
@@ -46,4 +56,12 @@ __all__ = [
     "UserPublic",
     "Token",
     "TokenData",
+
+    # ECharts 图表截图
+    "build_option",
+    "echarts_option_to_html",
+    "engine_make_snapshot",
+    "get_driver",
+    "render_chart_to_png",
+    "render_option_to_png",
 ]

{fastapi_authly-0.1.3 → fastapi_authly-0.1.5}/src/fastapi_authly/auth.py

@@ -103,12 +103,14 @@ class AuthModule:
                     status_code=status.HTTP_400_BAD_REQUEST,
                     detail="Incorrect username or password",
                 )
-            if not self.password_hasher.verify(body.password, getattr(user, "hashed_password", "")):
+
+            hashed_password = getattr(user, "hashed_password", None) or ""
+            if not hashed_password or not self.password_hasher.verify(body.password, hashed_password):
                 raise HTTPException(
                     status_code=status.HTTP_400_BAD_REQUEST,
                     detail="Incorrect username or password",
                 )
-
+                
             if not user.is_active:
                 raise HTTPException(status_code=400, detail="Inactive user")
 

fastapi_authly-0.1.5/src/fastapi_authly/charts.py

@@ -0,0 +1,359 @@
+# -*- coding: utf-8 -*-
+"""
+ECharts option 自组装 HTML → 包内 ECharts JS → 本地 Chrome 截图
+
+通用入口：直接传入 ECharts option 字典，不限定图表类型。
+- 包内仅包含 echarts.min.js（Chrome/Chromedriver 因体积超 PyPI 限制不随包分发）。
+- Chrome 与 ChromeDriver 需本机安装或通过参数传入路径；详见 get_driver / render_option_to_png。
+"""
+
+import base64
+import json
+import os
+import tempfile
+import time
+from pathlib import Path
+from typing import Any, Dict, List
+
+# 包内静态目录（安装后与 charts.py 同属 fastapi_authly 包）
+_STATIC_DIR = Path(__file__).resolve().parent / "static"
+
+# 默认路径：包内仅包含 echarts.min.js；Chrome/Chromedriver 不随包分发，存在时才用
+_chrome = _STATIC_DIR / "chrome-headless-shell-linux64" / "chrome-headless-shell"
+_chromedriver = _STATIC_DIR / "chromedriver-linux64" / "chromedriver"
+DEFAULT_CHROME_HEADLESS_PATH: Path | None = _chrome if _chrome.exists() else None
+DEFAULT_CHROMEDRIVER_PATH: Path | None = _chromedriver if _chromedriver.exists() else None
+DEFAULT_ECHARTS_PATH = _STATIC_DIR / "echarts.min.js"
+
+_CHROME_MISSING_MSG = (
+    "ECharts 截图需要 Chrome/Chromedriver。包内未包含（超过 PyPI 100MB 限制）。"
+    "请：(1) 本机安装 Chrome 与 ChromeDriver，或 (2) 将 get_driver / render_option_to_png 的 "
+    "chrome_headless_path、chromedriver_path 指向本地可执行文件。"
+)
+
+# ========== 自定义 Snapshot 脚本 ==========
+SNAPSHOT_JS = """
+    var ele = document.querySelector('div[_echarts_instance_]');
+    var mychart = echarts.getInstanceByDom(ele);
+    return mychart.getDataURL({
+        type: '%s',
+        pixelRatio: %s,
+        excludeComponents: ['toolbox']
+    });
+"""
+
+SNAPSHOT_SVG_JS = """
+    var element = document.querySelector('div[_echarts_instance_] div');
+    return element.innerHTML;
+"""
+
+# 内置配色（用于 build_option）
+COLORS = [
+    "#5470c6",
+    "#91cc75",
+    "#fac858",
+    "#ee6666",
+    "#73c0de",
+    "#3ba272",
+    "#fc8452",
+    "#9a60b4",
+    "#ea7ccc",
+]
+
+
+def _get_selenium():
+    """延迟导入 selenium，未安装时给出明确提示。"""
+    try:
+        from selenium import webdriver
+        from selenium.webdriver.chrome.options import Options
+        from selenium.webdriver.chrome.service import Service
+        return webdriver, Options, Service
+    except ImportError as e:
+        raise ImportError(
+            "ECharts 截图依赖 selenium，请安装： pip install fastapi-authly[charts] 或 pip install selenium"
+        ) from e
+
+
+def get_driver(
+    *,
+    chrome_headless_path: str | Path | None = None,
+    chromedriver_path: str | Path | None = None,
+) -> Any:
+    """
+    创建并返回 Chrome Headless WebDriver 实例。
+
+    Chrome 与 ChromeDriver 不随包分发（体积超 PyPI 限制），需本机安装或传入路径。
+    若包内存在（本地开发时）则优先使用；否则必须传入 chrome_headless_path / chromedriver_path。
+    """
+    webdriver_module, Options, Service = _get_selenium()
+    binary = chrome_headless_path or DEFAULT_CHROME_HEADLESS_PATH
+    driver_path = chromedriver_path or DEFAULT_CHROMEDRIVER_PATH
+    if binary is None or driver_path is None:
+        raise FileNotFoundError(_CHROME_MISSING_MSG)
+    options = Options()
+    options.add_argument("--headless=new")
+    options.add_argument("--no-sandbox")
+    options.add_argument("--disable-dev-shm-usage")
+    options.add_argument("--disable-gpu")
+    options.binary_location = str(binary)
+    service = Service(executable_path=str(driver_path))
+    return webdriver_module.Chrome(service=service, options=options)
+
+
+def engine_make_snapshot(
+    html_path: str,
+    file_type: str,
+    *,
+    pixel_ratio: int = 2,
+    delay: float = 2,
+    driver: Any = None,
+    chrome_headless_path: str | Path | None = None,
+    chromedriver_path: str | Path | None = None,
+    **kwargs: Any,
+) -> str:
+    """
+    对已存在的 HTML 文件用无头浏览器打开并执行 ECharts 截图脚本，返回 base64 或 SVG 字符串。
+    """
+    if delay < 0:
+        raise ValueError("delay 不能为负数")
+    if driver is None:
+        driver = get_driver(
+            chrome_headless_path=chrome_headless_path,
+            chromedriver_path=chromedriver_path,
+        )
+    if file_type == "svg":
+        snapshot_js = SNAPSHOT_SVG_JS
+    else:
+        snapshot_js = SNAPSHOT_JS % (file_type, pixel_ratio)
+    if not html_path.startswith(("http://", "https://", "file://")):
+        html_path = "file://" + os.path.abspath(html_path)
+    try:
+        driver.get(html_path)
+        time.sleep(delay)
+        return driver.execute_script(snapshot_js)
+    finally:
+        driver.quit()
+
+
+def echarts_option_to_html(
+    option: dict,
+    *,
+    width: int = 600,
+    height: int = 400,
+    title: str = "Chart",
+    local_echarts_path: str | Path | None = None,
+) -> str:
+    """将 ECharts option 字典组装成完整 HTML 字符串。"""
+    if local_echarts_path is None:
+        local_echarts_path = DEFAULT_ECHARTS_PATH
+    option_json = json.dumps(option, ensure_ascii=False)
+    js_src = "file://" + str(Path(local_echarts_path).resolve())
+    html = f"""<!DOCTYPE html>
+<html lang="zh-CN">
+<head>
+  <meta charset="UTF-8">
+  <meta name="viewport" content="width=device-width, initial-scale=1.0">
+  <title>{title}</title>
+  <script src="{js_src}"></script>
+</head>
+<body>
+  <div id="main" style="width:{width}px;height:{height}px;"></div>
+  <script>
+    var chartDom = document.getElementById("main");
+    var myChart = echarts.init(chartDom);
+    var option = {option_json};
+    myChart.setOption(option);
+  </script>
+</body>
+</html>"""
+    return html
+
+
+def render_option_to_png(
+    option: dict,
+    output_name: str = "chart.png",
+    *,
+    width: int = 600,
+    height: int = 400,
+    title: str = "Chart",
+    delay: float = 2,
+    pixel_ratio: int = 2,
+    is_remove_html: bool = True,
+    local_echarts_path: str | Path | None = None,
+    chrome_headless_path: str | Path | None = None,
+    chromedriver_path: str | Path | None = None,
+) -> str:
+    """
+    将 ECharts option 字典渲染为 PNG 图片。
+
+    不限定图表类型，任意 ECharts 支持的图均可（折线、柱状、饼、散点、地图等）。
+
+    Args:
+        option: ECharts 原生 option 字典
+        output_name: 输出 PNG 路径
+        width: 画布宽度（像素）
+        height: 画布高度（像素）
+        title: 页面标题
+        delay: 打开 HTML 后等待渲染的秒数
+        pixel_ratio: 导出图片像素比
+        is_remove_html: 是否在完成后删除临时 HTML 文件
+        local_echarts_path: ECharts JS 路径，默认使用包内 static/echarts.min.js
+        chrome_headless_path: Chrome Headless 可执行文件路径，默认使用包内 static
+        chromedriver_path: ChromeDriver 路径，默认使用包内 static
+
+    Returns:
+        输出文件的绝对路径
+    """
+    if not output_name.endswith(".png"):
+        output_name = output_name.rstrip(".png") + ".png"
+    if local_echarts_path is None:
+        local_echarts_path = DEFAULT_ECHARTS_PATH
+    html_content = echarts_option_to_html(
+        option,
+        width=width,
+        height=height,
+        title=title,
+        local_echarts_path=local_echarts_path,
+    )
+    with tempfile.NamedTemporaryFile(
+        mode="w",
+        suffix=".html",
+        delete=False,
+        encoding="utf-8",
+    ) as f:
+        f.write(html_content)
+        html_path = f.name
+    try:
+        raw = engine_make_snapshot(
+            html_path,
+            "png",
+            delay=delay,
+            pixel_ratio=pixel_ratio,
+            chrome_headless_path=chrome_headless_path,
+            chromedriver_path=chromedriver_path,
+        )
+        if "," in raw:
+            b64 = raw.split(",", 1)[1]
+        else:
+            b64 = raw
+        missing = len(b64) % 4
+        if missing:
+            b64 += "=" * (4 - missing)
+        data = base64.decodebytes(b64.encode("utf-8"))
+        with open(output_name, "wb") as f:
+            f.write(data)
+        return os.path.abspath(output_name)
+    finally:
+        if is_remove_html and os.path.exists(html_path):
+            os.unlink(html_path)
+
+
+def build_option(
+    chart_type: str,
+    title: str,
+    data: List[Dict],
+    *,
+    label_key: str = "month_name",
+    value_key: str = "count",
+) -> dict:
+    """根据类型 + 标题 + 数据构建 ECharts option（便捷封装，支持 line / bar / pie）。"""
+    labels = [item[label_key] for item in data]
+    values = [item[value_key] for item in data]
+    data_pair = [{"name": lb, "value": val} for lb, val in zip(labels, values)]
+    if chart_type == "line":
+        return {
+            "title": {"text": title, "left": "center"},
+            "color": COLORS,
+            "toolbox": {"show": True, "feature": {"saveAsImage": {"show": True}}},
+            "grid": {"left": "10%", "right": "10%", "top": "18%", "bottom": "15%", "containLabel": True},
+            "xAxis": {"type": "category", "data": labels},
+            "yAxis": {"type": "value"},
+            "series": [
+                {
+                    "type": "line",
+                    "data": values,
+                    "smooth": True,
+                    "symbol": "circle",
+                    "symbolSize": 8,
+                    "lineStyle": {"width": 2.5},
+                    "itemStyle": {"borderWidth": 2, "borderColor": "#fff"},
+                    "areaStyle": {"opacity": 0.15},
+                }
+            ],
+        }
+    if chart_type == "bar":
+        return {
+            "title": {"text": title, "left": "center"},
+            "color": COLORS,
+            "toolbox": {"show": True, "feature": {"saveAsImage": {"show": True}}},
+            "grid": {"left": "10%", "right": "10%", "top": "18%", "bottom": "15%", "containLabel": True},
+            "xAxis": {"type": "category", "data": labels},
+            "yAxis": {"type": "value"},
+            "series": [
+                {
+                    "type": "bar",
+                    "data": values,
+                    "itemStyle": {"borderRadius": [6, 6, 0, 0], "borderWidth": 0},
+                }
+            ],
+        }
+    if chart_type == "pie":
+        return {
+            "title": {"text": title, "left": "center"},
+            "color": COLORS,
+            "toolbox": {"show": True, "feature": {"saveAsImage": {"show": True}}},
+            "legend": {"orient": "horizontal", "bottom": "5%", "type": "scroll"},
+            "series": [
+                {
+                    "type": "pie",
+                    "radius": ["40%", "70%"],
+                    "center": ["50%", "50%"],
+                    "data": data_pair,
+                    "itemStyle": {"borderRadius": 8, "borderWidth": 2, "borderColor": "#fff"},
+                    "label": {"formatter": "{b}: {c}", "position": "outside"},
+                }
+            ],
+        }
+    raise ValueError(f"不支持的图表类型: {chart_type}，仅支持 line / bar / pie")
+
+
+def render_chart_to_png(
+    chart_type: str,
+    title: str,
+    data: List[Dict],
+    output_name: str | None = None,
+    *,
+    label_key: str = "month_name",
+    value_key: str = "count",
+    width: int = 600,
+    height: int = 400,
+    delay: float = 2,
+    pixel_ratio: int = 2,
+    is_remove_html: bool = True,
+    local_echarts_path: str | Path | None = None,
+    chrome_headless_path: str | Path | None = None,
+    chromedriver_path: str | Path | None = None,
+) -> str:
+    """便捷封装：先 build_option 再 render_option_to_png。"""
+    option = build_option(
+        chart_type,
+        title,
+        data,
+        label_key=label_key,
+        value_key=value_key,
+    )
+    if output_name is None:
+        output_name = title + ".png"
+    return render_option_to_png(
+        option,
+        output_name=output_name,
+        width=width,
+        height=height,
+        title=title,
+        delay=delay,
+        pixel_ratio=pixel_ratio,
+        is_remove_html=is_remove_html,
+        local_echarts_path=local_echarts_path,
+        chrome_headless_path=chrome_headless_path,
+        chromedriver_path=chromedriver_path,
+    )

{fastapi_authly-0.1.3 → fastapi_authly-0.1.5}/src/fastapi_authly/core/config.py

@@ -1,8 +1,8 @@
 """Configuration settings for fastapi-authly."""
 
-from typing import List, Optional, Any
+from typing import List, Optional, Any, Union
 from datetime import timedelta
-from pydantic import BaseModel, Field, ConfigDict
+from pydantic import BaseModel, Field, ConfigDict, model_validator
 from pydantic_settings import BaseSettings, SettingsConfigDict
 
 class JwtConfig(BaseModel):
@@ -26,8 +26,6 @@ class JwtConfig(BaseModel):
         return timedelta(days=self.refresh_token_expires_days)
 
 
-
-
 class AuthConfig(BaseSettings):
     """
     Runtime configuration loaded from environment variables with ``AUTH_`` prefix.
@@ -35,10 +33,11 @@ class AuthConfig(BaseSettings):
     Host applications can still pass an ``AuthConfig`` instance directly;
     in that case, the passed values override the environment values.
     """
-    jwt: JwtConfig = JwtConfig()
+    jwt: Union[JwtConfig, dict] = Field(default_factory=JwtConfig)
 
     router_prefix: str = "/auth"
     router_tags: List[str] = Field(default_factory=lambda: ["authentication"])
+    token_url: str = "login"  # OAuth2 token URL path
 
     enable_password_recovery: bool = True
     enable_user_registration: bool = True
@@ -59,26 +58,47 @@ class AuthConfig(BaseSettings):
         extra="ignore",
     )
     
+    @model_validator(mode='after')
+    def _ensure_jwt_is_config(self):
+        """确保 jwt 字段始终是 JwtConfig 实例"""
+        if isinstance(self.jwt, dict):
+            self.jwt = JwtConfig(**self.jwt)
+        elif not isinstance(self.jwt, JwtConfig):
+            self.jwt = JwtConfig()
+        return self
+    
+    def _ensure_jwt_config(self) -> JwtConfig:
+        """确保 jwt 是 JwtConfig 实例，如果不是则转换"""
+        if isinstance(self.jwt, dict):
+            self.jwt = JwtConfig(**self.jwt)
+        elif not isinstance(self.jwt, JwtConfig):
+            self.jwt = JwtConfig()
+        return self.jwt
+    
     # 属性访问器：直接访问 jwt 中的属性，兼容现有代码
     @property
     def secret_key(self) -> str:
         """JWT secret key"""
-        return self.jwt.secret_key
+        jwt_config = self._ensure_jwt_config()
+        return jwt_config.secret_key
     
     @property
     def algorithm(self) -> str:
         """JWT algorithm"""
-        return self.jwt.algorithm
+        jwt_config = self._ensure_jwt_config()
+        return jwt_config.algorithm
     
     @property
     def access_token_expire_minutes(self) -> Optional[int]:
         """Access token expiration in minutes (compatible with auth.py)"""
-        return self.jwt.access_token_expires_minutes
+        jwt_config = self._ensure_jwt_config()
+        return jwt_config.access_token_expires_minutes
     
     @property
     def refresh_token_expire_days(self) -> int:
         """Refresh token expiration in days"""
-        return self.jwt.refresh_token_expire_days
+        jwt_config = self._ensure_jwt_config()
+        return jwt_config.refresh_token_expires_days
 
 _config = AuthConfig()
 
@@ -95,4 +115,6 @@ class AuthDependencyConfig(BaseModel):
     token_service: Optional[Any] = None
     mailer: Optional[Any] = None
     # 可选：自定义 token 提取依赖（例如自定义 Bearer/JWT 解析）
+    # token_dependency: Optional[Any] = Noneptional[Any] = None
+    # 可选：自定义 token 提取依赖（例如自定义 Bearer/JWT 解析）
     token_dependency: Optional[Any] = None

{fastapi_authly-0.1.3 → fastapi_authly-0.1.5}/src/fastapi_authly/core/security.py

@@ -3,6 +3,7 @@ from typing import Any, Dict, Optional
 
 from jose import JWTError, jwt
 from passlib.context import CryptContext
+from passlib.exc import UnknownHashError
 
 from ..interfaces import PasswordHasher, TokenService
 
@@ -18,7 +19,13 @@ class BcryptPasswordHasher(PasswordHasher):
         return self._ctx.hash(password)
 
     def verify(self, password: str, hashed: str) -> bool:
-        return self._ctx.verify(password, hashed)
+        if not hashed:
+            return False
+        try:
+            return self._ctx.verify(password, hashed)
+        except UnknownHashError:
+            # 如果哈希格式无法识别，返回 False
+            return False
 
 
 class JWTTokenService(TokenService):