from app.auth import hash_password, verify_password


def test_bcrypt_hash_verifies_password():
    password_hash = hash_password("ChangeMe123!", rounds=4)
    assert verify_password("ChangeMe123!", password_hash)
    assert not verify_password("bad-password", password_hash)