s0wlz (Matthias Puchstein)
ff5ad26cfc
- Switched to secure httpOnly, SameSite=Strict cookies for JWT authentication. - Refactored backend to use AppState for shared secrets and database pool caching. - Modernized frontend with Svelte 5 runes ($state) and removed localStorage reliance. - Gated destructive test endpoints behind debug_assertions and fixed unsafe test patterns. - Enhanced CI pipeline with cargo clippy, cargo fmt, and pinned pnpm version. - Updated documentation and implementation plans to match the hardened architecture.
29 lines
868 B
TOML
29 lines
868 B
TOML
[package]
|
|
name = "tutortool"
|
|
version = "0.1.0"
|
|
edition = "2024"
|
|
rust-version = "1.95.0"
|
|
|
|
[dependencies]
|
|
axum = { version = "0.8", features = ["macros", "multipart"] }
|
|
axum-extra = { version = "0.10", features = ["cookie"] }
|
|
tokio = { version = "1", features = ["full"] }
|
|
sqlx = { version = "0.8", features = ["sqlite", "runtime-tokio", "macros", "migrate"] }
|
|
serde = { version = "1", features = ["derive"] }
|
|
serde_json = "1"
|
|
jsonwebtoken = { version = "10", features = ["rust_crypto"] }
|
|
bcrypt = "0.19"
|
|
tower-http = { version = "0.6", features = ["fs", "cors"] }
|
|
chrono = { version = "0.4", features = ["serde"] }
|
|
rand = "0.9"
|
|
thiserror = "2"
|
|
tracing = "0.1"
|
|
tracing-subscriber = { version = "0.3", features = ["env-filter"] }
|
|
|
|
[dev-dependencies]
|
|
tower = { version = "0.5", features = ["util"] }
|
|
http-body-util = "0.1"
|
|
bytes = "1"
|
|
temp-env = "0.3"
|
|
serial_test = "3.1"
|