♻️ Replace passlib with pwdlib

[4sushi]

Replace hash library passlib by pwdlib, since passlib is not stable.
Pwdlib is used by fastapi.

Related PR

#1539

Changes are needed

[YuriiMotov]

@4sushi, thanks for your interest!

Since we change the hashing algorithm, this changes will be breaking for existing projects.
I think we should keep supporting Bcrypt for existing password hashes, but use Argon2 for new as it's explained in docs: https://frankie567.github.io/pwdlib/guide/#password-hashing

[ceb10n]

It should be very straightforward to keep bcrypt support based on to the docs @YuriiMotov shared, @4sushi 😄

You just need to update pyproject.toml:

"pwdlib[argon2,bcrypt]>=0.2.1",

And in security.py, import and configure both hashers:

from pwdlib import PasswordHash
from pwdlib.hashers.argon2 import Argon2Hasher
from pwdlib.hashers.bcrypt import BcryptHasher

password_hash = PasswordHash(
    (
        Argon2Hasher(),
        BcryptHasher(),
    )
)

All tests will pass:

[YuriiMotov]

LGTM!

Changes are not breaking - we support existing passwords hashed with bcrypt, but generate new passwords using argon2. Tested it locally.

Thanks @4sushi for initial work!
Thanks @ceb10n for review!

[4sushi]

Sorry I was pretty busy, thanks @ceb10n for completing the PR.

[github-actions]

This pull request has a merge conflict that needs to be resolved.