Deprecated werkzeug.security.safe_str_cm replaced with hmac.compare_d…

…igest (maxcountryman#70)

(cherry picked from commit 14eec93)

maxcountryman#70

flask_bcrypt.py

@@ -16,7 +16,7 @@
 __copyright__ = '(c) 2011 by Max Countryman, (c) 2021 by Suren Khorenyan'
 __all__ = ['Bcrypt', 'check_password_hash', 'generate_password_hash']
 
-from werkzeug.security import safe_str_cmp
+import hmac
 
 try:
     import bcrypt
@@ -230,4 +230,4 @@ def check_password_hash(self, pw_hash, password):
             password = hashlib.sha256(password).hexdigest()
             password = self._unicode_to_bytes(password)
 
-        return safe_str_cmp(bcrypt.hashpw(password, pw_hash), pw_hash)
+        return hmac.compare_digest(bcrypt.hashpw(password, pw_hash), pw_hash)