enhance security by adding cache control headers, validating password length, and rejecting encoded slashes in path processing

containers/auth-gateway/auth_gateway/services/password_service.py

@@ -7,7 +7,12 @@ from auth_gateway.models.auth import UserModel
 password_hasher = PasswordHasher()
 
 
+MAX_PASSWORD_LENGTH = 1024
+
+
 def verify_user_password(username: str, password: str, users: dict[str, UserModel]) -> UserModel | None:
+    if not password or len(password) > MAX_PASSWORD_LENGTH:
+        return None
     user = users.get(username)
     if not user or not user.password_hash:
         return None