Files
stash/Cargo.toml
T
stash dea7781b86 feat(auth): P0 登录与会话(迁移 v16、argon2id、HttpOnly Cookie)
- 迁移机制:schema::migrate 支持 15→16,新增 admin/session/setting 表
- 接口:session/setup/login/logout/password;SameSite=Strict + Origin 校验 + 失败限流
- 会话只存 token 的 sha256;改密清空全部会话
- 前端:/login 独立壳(首次=设置密码),页头登录/退出切换
- 测试:37 passed(迁移 + 登录/会话 4 例)
- 文档:README 登录说明、docs/ADMIN-PLAN.md 方案与 P0 记录
2026-10-29 12:41:03 +08:00

46 lines
1.2 KiB
TOML

[package]
name = "stash"
version = "0.1.0"
description = ""
authors = [""]
edition = "2024"
[dependencies]
tokio = { version = "1.38", features = ["full"] }
tracing = "0.1"
tracing-subscriber = { version = "0.3", features = ["env-filter"] }
thiserror = "2.0.21"
anyhow = "1.0"
clap = { version = "4.6.7", features = ["derive"] }
colored = "3.1.1"
# Web 核心与静态托管
axum = "0.8.9"
tower-http = { version = "0.7.1", features = ["fs", "cors", "trace"] }
tower = { version = "0.4", features = ["util"] }
serde = { version = "1.0", features = ["derive"] }
serde_json = "1.0"
mime_guess = "2.0"
include_dir = "0.7"
async-stream = "0.3"
notify = "8"
# 内容库:SQLite 随二进制静态编译,运行时不需要任何外部 DLL
rusqlite = { version = "0.32", features = ["bundled"] }
argon2 = "0.5"
rand = "0.8"
sha2 = "0.10"
[build-dependencies]
# build.rs 用它递归复制前端产物到 $OUT_DIR/web
walkdir = "2.4"
# MSVC 的 /Z7(旧式调试信息)在 cc-rs 生成的命令行下会触发
# "D8050: 无法执行 c1.dll" —— SQLite 是纯 C 依赖,调试它没有意义,
# 这里关掉该 crate 的调试信息,cc-rs 就不会再加 -Z7。
[profile.dev.package.libsqlite3-sys]
debug = false
[profile.test.package.libsqlite3-sys]
debug = false