generated from eblume/project-template
Erich Blume
f4db186234
Some checks failed
Build / validate (pull_request) Failing after 9s
Close the auth loop: clients obtain a bearer token and present it to the hub (tech-spec §13). - oauth module: DeviceFlow (RFC 8628 — discover, start, poll handling authorization_pending/slow_down, refresh) + StoredToken + TokenStore (OS keyring via `keyring`, in-memory for tests) + current_bearer (loads and refreshes-on-expiry). - heph auth login/logout: runs the device flow, prints the verification URL + user code, caches the token in the keyring. - sync_once gains a bearer arg; the daemon (Daemon::spawn_sync_loop + sync.now) obtains it via current_bearer; RemoteStore attaches it to /rpc. --oidc-issuer/--oidc-client-id configure the spoke/client. - Fix a latent panic: reqwest::blocking spins its own runtime and panics inside the daemon's spawn_blocking pool. All blocking auth/proxy HTTP (OidcVerifier JWKS, DeviceFlow, RemoteStore) now uses runtime-free `ureq`; async reqwest remains only for sync_once. (Caught by the new e2e test.) - Tests (offline): device flow + refresh + token store vs a mock OAuth server; a full spoke->authenticated-hub loop (valid token accepted, missing token rejected) signed by a runtime-generated RSA key. 112 tests green; clippy -D warnings + fmt + prek clean. Slice 10 (auth) complete; next is heph.nvim. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
51 lines
1.2 KiB
TOML
51 lines
1.2 KiB
TOML
[workspace]
|
|
resolver = "2"
|
|
members = ["crates/heph-core", "crates/hephd", "crates/heph"]
|
|
|
|
[workspace.package]
|
|
edition = "2021"
|
|
version = "0.0.0"
|
|
license = "LicenseRef-Proprietary"
|
|
publish = false
|
|
authors = ["Erich Blume <blume.erich@gmail.com>"]
|
|
rust-version = "1.85"
|
|
|
|
[workspace.dependencies]
|
|
rusqlite = { version = "0.32", features = ["bundled"] }
|
|
ulid = "1"
|
|
thiserror = "2"
|
|
anyhow = "1"
|
|
pulldown-cmark = { version = "0.13", default-features = false }
|
|
rrule = "0.13"
|
|
yrs = "0.26"
|
|
chrono = { version = "0.4", default-features = false, features = ["clock"] }
|
|
serde = { version = "1", features = ["derive"] }
|
|
serde_json = "1"
|
|
tokio = { version = "1", features = [
|
|
"rt-multi-thread",
|
|
"net",
|
|
"io-util",
|
|
"macros",
|
|
"sync",
|
|
"time",
|
|
] }
|
|
tracing = "0.1"
|
|
tracing-subscriber = { version = "0.3", features = ["env-filter"] }
|
|
clap = { version = "4", features = ["derive"] }
|
|
fs4 = "0.12"
|
|
axum = "0.8"
|
|
jsonwebtoken = { version = "10", features = ["rust_crypto"] }
|
|
keyring = { version = "3", features = [
|
|
"apple-native",
|
|
"sync-secret-service",
|
|
"crypto-rust",
|
|
"vendored",
|
|
] }
|
|
ureq = { version = "3", features = ["json"] }
|
|
reqwest = { version = "0.13", default-features = false, features = [
|
|
"json",
|
|
"query",
|
|
] }
|
|
|
|
[profile.release]
|
|
lto = "thin"
|