save code

backend/app/api/auth.py

@@ -3,11 +3,12 @@ from fastapi import APIRouter, Depends, HTTPException, status
 from fastapi.security import OAuth2PasswordRequestForm
 from sqlalchemy.orm import Session
 import os
+import bcrypt
 from app.config import settings
 from app.database.database import get_db
 from app.models.user import User
 from app.schemas.auth import Token
-from app.common.utils import verify_password, create_access_token
+from app.common.utils import create_access_token
 
 router = APIRouter(prefix="/auth", tags=["认证"])
 
@@ -17,8 +18,8 @@ def login(form_data: OAuth2PasswordRequestForm = Depends(), db: Session = Depend
     """用户登录"""
     user = db.query(User).filter(User.username == form_data.username).first()
     
-    # 密码验证：比较用户存储的密码
-    if not user or form_data.password != user.password:
+    # 密码验证：使用bcrypt直接验证密码
+    if not user or not bcrypt.checkpw(form_data.password.encode('utf-8'), user.password.encode('utf-8')):
         raise HTTPException(
             status_code=status.HTTP_401_UNAUTHORIZED,
             detail="Incorrect username or password",