1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45

[package]
name = "exego"
version = "0.5.0"
edition = "2024"
license = "Unlicense"

[dependencies]
axum = "0.8"
axum-extra = { version = "0.12", features = ["cookie"] }
tokio = { version = "1", features = ["rt-multi-thread", "macros", "signal"] }
askama = "0.16"
sqlx = { version = "0.8", features = ["runtime-tokio", "tls-rustls-ring", "postgres", "chrono", "migrate", "uuid", "json"] }
uuid = { version = "1", features = ["v7", "serde"] }
# conditional-ui : login usernameless (discoverable credentials) ;
# danger-allow-state-serialisation : l'état de cérémonie part dans un cookie
# signé éphémère (l'app est stateless), pas dans une table.
webauthn-rs = { version = "0.5", features = ["conditional-ui", "danger-allow-state-serialisation"] }
# Uniquement pour ResidentKeyRequirement (pas dans le prelude de webauthn-rs) :
# l'enregistrement force la clé résidente, condition du login usernameless.
webauthn-rs-proto = "0.5"
# NOTE : tire biscuit-quote → proc-macro-error2 (non maintenue, future-incompat
# E0365) via la feature par défaut datalog-macro. On n'utilise pas ces macros,
# mais biscuit-auth 6.0.0 ne compile pas en default-features = false (bug de
# feature-gating sur ToAnyParam) — à retenter quand une 6.0.1+ sortira.
biscuit-auth = "6"
argon2 = "0.5"
chrono = { version = "0.4", features = ["serde"] }
chrono-tz = "0.10"
clap = { version = "4", features = ["derive"] }
thiserror = "2"
anyhow = "1"
hmac = "0.12"
sha2 = "0.10"
hex = "0.4"
subtle = "2"
time = "0.3"
rpassword = "7"
serde = { version = "1", features = ["derive"] }
serde_json = "1"
base64 = "0.22"
tracing = "0.1"
tracing-subscriber = { version = "0.3", features = ["env-filter"] }

[profile.release]
lto = "thin"