full-stack-fastapi-template icon indicating copy to clipboard operation
full-stack-fastapi-template copied to clipboard

♻️ Use bcrypt directly instead of passlib

Open karta9821 opened this issue 10 months ago • 2 comments

The passlib library, previously used for password hashing in this project, is no longer actively maintained — its last update was over 4 years ago. This has been confirmed here: link to the issue.

To improve long-term security and maintainability, this PR replaces passlib with direct usage of the bcrypt library, which is actively maintained and widely used for secure password hashing.

Discussion: https://github.com/fastapi/full-stack-fastapi-template/discussions/1369

karta9821 avatar Apr 07 '25 19:04 karta9821

This pull request has a merge conflict that needs to be resolved.

github-actions[bot] avatar Sep 07 '25 22:09 github-actions[bot]

passlib was recently replaced with pwdlib with Argon2 in FastAPI repository: https://github.com/fastapi/fastapi/pull/13917

So, we should probably be consistent here and also use pwdlib in this repo

YuriiMotov avatar Oct 10 '25 12:10 YuriiMotov