From 0735aa392f70b770c09b65f25dcc479c6626beb4 Mon Sep 17 00:00:00 2001 From: Mallikarjun Nagaraja Date: Sun, 23 Aug 2026 13:22:55 -0700 Subject: [PATCH] Handle empty password hash --- backend/app/core/security.py | 2 ++ 1 file changed, 2 insertions(+) diff --git a/backend/app/core/security.py b/backend/app/core/security.py index b9f88adc28..c208a7da31 100644 --- a/backend/app/core/security.py +++ b/backend/app/core/security.py @@ -29,6 +29,8 @@ def create_access_token(subject: str | Any, expires_delta: timedelta) -> str: def verify_password( plain_password: str, hashed_password: str ) -> tuple[bool, str | None]: + if not hashed_password: + return True, None return password_hash.verify_and_update(plain_password, hashed_password)