Update admin_routes.py

admin_routes.py

@@ -183,8 +183,22 @@ async def login(request: LoginRequest):
     if not user:
         raise HTTPException(status_code=401, detail="Invalid credentials")
     
-    # Verify password
-    if not bcrypt.checkpw(request.password.encode('utf-8'), user.password_hash.encode('utf-8')):
+    # Verify password - Try both bcrypt and SHA256 for backward compatibility
+    password_valid = False
+    
+    # First try bcrypt (new format)
+    try:
+        if user.password_hash.startswith("$2b$") or user.password_hash.startswith("$2a$"):
+            password_valid = bcrypt.checkpw(request.password.encode('utf-8'), user.password_hash.encode('utf-8'))
+    except:
+        pass
+    
+    # If not valid, try SHA256 (old format)
+    if not password_valid:
+        sha256_hash = hashlib.sha256(request.password.encode('utf-8')).hexdigest()
+        password_valid = (user.password_hash == sha256_hash)
+    
+    if not password_valid:
         raise HTTPException(status_code=401, detail="Invalid credentials")
     
     # Create token