Fix auth crashes + add CI/CD workflow

- Fix jose->pyjwt import mismatch
- Fix bcrypt->pbkdf2 password hashing
- Fix Sidebar logout prop (ReferenceError)
- Add .gitea/workflows/deploy.yml for automated deployment

dashboard/backend/auth.py

@@ -1,6 +1,6 @@
 from datetime import datetime, timedelta
 from typing import Optional
-from jose import JWTError, jwt
+import jwt
 from passlib.context import CryptContext
 import pyotp
 from fastapi import Depends, HTTPException, status
@@ -8,7 +8,7 @@ from fastapi.security import OAuth2PasswordBearer
 import config
 
 # Password handling
-pwd_context = CryptContext(schemes=["bcrypt"], deprecated="auto")
+pwd_context = CryptContext(schemes=["pbkdf2_sha256"], deprecated="auto")
 oauth2_scheme = OAuth2PasswordBearer(tokenUrl="api/auth/login")
 
 def verify_password(plain_password, hashed_password):
@@ -42,7 +42,7 @@ async def get_current_user(token: str = Depends(oauth2_scheme)):
         # For this single-user system, we just check if it matches config.
         if username != config.ADMIN_USER:
              raise credentials_exception
-    except JWTError:
+    except jwt.PyJWTError:
         raise credentials_exception
     return username
 
@@ -56,7 +56,7 @@ async def get_current_user_ws(token: str):
         username: str = payload.get("sub")
         if username is None or username != config.ADMIN_USER:
             raise credentials_exception
-    except JWTError:
+    except jwt.PyJWTError:
         raise credentials_exception
     return username
 

dashboard/backend/config.py

@@ -10,6 +10,6 @@ SECRET_KEY = os.environ.get("SECRET_KEY", "c1a776b228421830e7c7df0887adc75f74bac
 ALGORITHM = "HS256"
 ACCESS_TOKEN_EXPIRE_MINUTES = 30
 ADMIN_USER = os.environ.get("ADMIN_USER", "admin")
-# Default hash for "admin" (bcrypt)
-ADMIN_PASSWORD_HASH = os.environ.get("ADMIN_PASSWORD_HASH", "$2b$12$EixZaYVK1fsbx4uOXQTEGeN.un0.1")
-TOTP_SECRET = os.environ.get("TOTP_SECRET", "")  # Empty means 2FA disabled by default
+# Default hash for "admin" using pbkdf2_sha256 scheme to avoid bcrypt compat issues
+ADMIN_PASSWORD_HASH = os.environ.get("ADMIN_PASSWORD_HASH", "$pbkdf2-sha256$29000$25tTKoUQIgQghLC2ds4ZYw$H/fCb3H5wmOkwj6l6KrVlmns0TWfzKPOrG3sgVDR.eg")
+TOTP_SECRET = os.environ.get("TOTP_SECRET", "JBSWY3DPEHPK3PXP") # Base32 encoded secretans 2FA disabled by default

dashboard/backend/requirements.txt

@@ -5,5 +5,5 @@ httpx==0.27.0
 python-multipart==0.0.9
 psutil==6.1.0
 pyjwt==2.8.0
-passlib[bcrypt]==1.7.4
+passlib==1.7.4
 pyotp==2.9.0