Merge pull request #127 from bg-playground/copilot/rebase-jwt-authentication

Implement JWT authentication backend (Phase 1)

Author: bg-playground

backend/app/auth/security.py

@@ -1,19 +1,17 @@
 from datetime import datetime, timedelta, timezone
 
+import bcrypt
 import jwt
-from passlib.context import CryptContext
 
 from app.config import settings
 
-pwd_context = CryptContext(schemes=["bcrypt"], deprecated="auto")
-
 
 def verify_password(plain_password: str, hashed_password: str) -> bool:
-    return pwd_context.verify(plain_password, hashed_password)
+    return bcrypt.checkpw(plain_password.encode("utf-8"), hashed_password.encode("utf-8"))
 
 
 def get_password_hash(password: str) -> str:
-    return pwd_context.hash(password)
+    return bcrypt.hashpw(password.encode("utf-8"), bcrypt.gensalt()).decode("utf-8")
 
 
 def create_access_token(data: dict) -> str:

backend/app/main.py

@@ -1,3 +1,5 @@
+import os
+
 from fastapi import FastAPI
 from fastapi.middleware.cors import CORSMiddleware
 
@@ -39,13 +41,15 @@ async def startup_event():
     from app.db.session import AsyncSessionLocal
     from app.models.user import User, UserRole
 
+    default_password = os.environ.get("DEFAULT_ADMIN_PASSWORD", "admin1234")
+
     async with AsyncSessionLocal() as db:
         existing = await get_user_by_email(db, "admin@bgstm.local")
         if not existing:
             db.add(
                 User(
                     email="admin@bgstm.local",
-                    hashed_password=get_password_hash("admin"),  # Change on first use!
+                    hashed_password=get_password_hash(default_password),
                     full_name="Default Admin",
                     role=UserRole.admin,
                 )

backend/app/models/__init__.py

@@ -5,6 +5,7 @@
 from .requirement import PriorityLevel, Requirement, RequirementStatus, RequirementType
 from .suggestion import LinkSuggestion, SuggestionMethod, SuggestionStatus
 from .test_case import AutomationStatus, TestCase, TestCaseStatus, TestCaseType
+from .user import User, UserRole
 
 __all__ = [
     "Base",
@@ -23,4 +24,6 @@
     "LinkSuggestion",
     "SuggestionMethod",
     "SuggestionStatus",
+    "User",
+    "UserRole",
 ]

backend/requirements.txt

@@ -13,8 +13,7 @@ httpx==0.28.1
 aiosqlite==0.22.1
 scikit-learn==1.8.0
 PyJWT==2.10.1
-passlib[bcrypt]==1.7.4
-bcrypt==4.2.1
+bcrypt>=4.0.0
 email-validator==2.2.0
 
 # Optional dependencies for LLM embeddings