- Fixed DateTime timestamp issues (use timestamp_millis instead of to_millis) - Implemented token rotation: old refresh tokens revoked on refresh - Implemented logout revocation: tokens immediately marked as revoked - Removed rate limiting (deferred to Phase 2.6) - Created comprehensive verification report - Updated STATUS.md All Phase 2.3 objectives complete: ✅ JWT Access Tokens (15 min expiry) ✅ JWT Refresh Tokens (30 day expiry) ✅ Token Rotation ✅ Token Revocation ✅ PBKDF2 Password Hashing ✅ Auth endpoints (register, login, refresh, logout) ✅ Protected routes with JWT middleware ✅ Health check endpoints Compiles successfully with only unused code warnings.
32 lines
926 B
TOML
32 lines
926 B
TOML
[package]
|
|
name = "normogen-backend"
|
|
version = "0.1.0"
|
|
edition = "2021"
|
|
|
|
[dependencies]
|
|
axum = { version = "0.7", features = ["macros", "multipart"] }
|
|
tokio = { version = "1", features = ["full"] }
|
|
tower = "0.4"
|
|
tower-http = { version = "0.5", features = ["cors", "trace", "limit", "decompression-gzip"] }
|
|
tower_governor = "0.4"
|
|
governor = "0.6"
|
|
serde = { version = "1", features = ["derive"] }
|
|
serde_json = "1"
|
|
mongodb = "2.8"
|
|
jsonwebtoken = "9"
|
|
async-trait = "0.1"
|
|
dotenv = "0.15"
|
|
tracing = "0.1"
|
|
tracing-subscriber = { version = "0.3", features = ["env-filter"] }
|
|
validator = { version = "0.16", features = ["derive"] }
|
|
uuid = { version = "1", features = ["v4", "serde"] }
|
|
chrono = { version = "0.4", features = ["serde"] }
|
|
pbkdf2 = { version = "0.12", features = ["simple"] }
|
|
sha2 = "0.10"
|
|
rand = "0.8"
|
|
anyhow = "1"
|
|
thiserror = "1"
|
|
|
|
[dev-dependencies]
|
|
tokio-test = "0.4"
|
|
reqwest = { version = "0.12", features = ["json"] }
|