compute password hashes in the background

src/phoenix/server/api/mutations/user_mutations.py

@@ -1,3 +1,4 @@
+import asyncio
 from typing import Optional
 
 import strawberry
@@ -40,7 +41,12 @@ async def create_user(
         user_role_id = (
             select(models.UserRole.id).where(models.UserRole.name == role_name).scalar_subquery()
         )
-        password_hash = compute_password_hash(password=password, salt=info.context.get_secret())
+        secret = info.context.get_secret()
+        loop = asyncio.get_running_loop()
+        password_hash = await loop.run_in_executor(
+            executor=None,
+            func=lambda: compute_password_hash(password=password, salt=secret),
+        )
         try:
             async with info.context.db() as session:
                 user = await session.scalar(

src/phoenix/server/api/routers/auth.py

@@ -26,12 +26,11 @@ async def login(
             user := await session.scalar(select(models.User).where(models.User.email == email))
         ) is None or (password_hash := user.password_hash) is None:
             return Response(status_code=HTTP_401_UNAUTHORIZED)
+    secret = request.app.state.get_secret()
     loop = asyncio.get_running_loop()
     if not await loop.run_in_executor(
         executor=None,
-        func=lambda: is_valid_password(
-            password=password, salt=request.app.state.get_secret(), password_hash=password_hash
-        ),
+        func=lambda: is_valid_password(password=password, salt=secret, password_hash=password_hash),
     ):
         return Response(status_code=HTTP_401_UNAUTHORIZED)
     response = Response(status_code=HTTP_204_NO_CONTENT)