I don’t think this is a spoiler because I don’t think it’s intentionally part of the challenge, but here is how to submit the flag for this one;
The actual password in the flag only uses the first bunch of characters from the password the .py script takes. I think it’s a mistake because the flag has } in it, but who knows.
I don’t have the exact # of characters because I was deleting them one by one and then the flag just submitted, so I’m not sure of exactly where it worked.
Just put HTB{user:thePWDYouHave} and start deleting characters from the right, trying to submit each time. I.E. HTB{user:thePWDYouH} would be the third attempt. After you delete quite a few, one will work.