optimize+注释

backend/app/core/security.py

@@ -60,7 +60,13 @@ def hash_verification_code(code: str) -> str:
 
 
 def verify_verification_code(code: str, expected_hash: str) -> bool:
-    return hmac.compare_digest(hash_verification_code(code), expected_hash)
+    try:
+        # compare against string to avoid type issues with hmac.compare_digest
+        code_hash = str(hash_verification_code(code))
+        expected = str(expected_hash)
+        return hmac.compare_digest(code_hash, expected)
+    except Exception:
+        return False
 
 
 def _urlsafe_b64encode(raw: bytes) -> str: