Files
madbase/Cargo.toml
Vlad Durnea 38cab8c246
Some checks failed
CI/CD Pipeline / lint (push) Successful in 3m45s
CI/CD Pipeline / integration-tests (push) Failing after 58s
CI/CD Pipeline / unit-tests (push) Failing after 1m2s
CI/CD Pipeline / e2e-tests (push) Has been skipped
CI/CD Pipeline / build (push) Has been skipped
Verify M2/M3 implementation, fix regressions against M0/M1
Regressions fixed:
- gateway/src/worker.rs: missing session_manager field in AuthState (M3 regression)
- gateway/src/main.rs: same missing field in monolithic gateway
- storage/src/handlers.rs: removed unused validate_role (now handled by RlsTransaction)

M2 Storage Pillar — verified complete:
- StorageBackend trait with full API (put/get/delete/copy/head/list/multipart)
- AwsS3Backend implementation with streaming get_object
- StorageMode enum (Cloud/SelfHosted) in Config
- All routes: CRUD buckets, CRUD objects, copy, move, sign, public URL, health
- Bucket constraints: file_size_limit + allowed_mime_types enforced on upload
- TUS resumable uploads with S3 multipart (5MB chunking)
- Image transforms run via spawn_blocking
- docker-compose.pillar-storage.yml, templates/storage-node.yaml
- Shared Docker network on all pillar compose files

M3 Auth Completeness — verified complete:
- POST /logout revokes refresh tokens + Redis sessions
- GET /settings returns provider availability
- POST /magiclink with hashed token storage
- DELETE /user soft-delete with token revocation
- Recovery flow accepts new password
- Email change requires re-verification via token
- OAuth callback redirects with fragment tokens
- MFA verify returns aal2 JWT with amr claims
- MFA challenge validates factor ownership
- SessionManager wired into login/logout
- GET /sessions returns active sessions
- Configurable ACCESS_TOKEN_LIFETIME
- Claims model extended with session_id, aal, amr

Tests: 62 passed, 0 failed, 11 ignored (external services)
Warnings: 0
Made-with: Cursor
2026-03-15 14:40:48 +02:00

48 lines
1.2 KiB
TOML

[workspace]
resolver = "2"
members = [
"common",
"gateway",
"auth",
"data_api",
"control_plane",
"realtime",
"storage",
"functions",
]
[workspace.dependencies]
tokio = { version = "1.36", features = ["full"] }
serde = { version = "1.0", features = ["derive"] }
serde_json = "1.0"
axum = "0.7"
tracing = "0.1"
tracing-subscriber = { version = "0.3", features = ["env-filter", "json"] }
sqlx = { version = "0.8", features = ["runtime-tokio-rustls", "postgres", "uuid", "chrono", "json", "migrate"] }
uuid = { version = "1.7", features = ["v4", "serde"] }
thiserror = "1.0"
dotenvy = "0.15"
config = "0.13"
chrono = { version = "0.4", features = ["serde"] }
anyhow = "1.0"
redis = { version = "0.25", features = ["tokio-comp", "aio"] }
argon2 = "0.5"
jsonwebtoken = "9.2"
rand = "0.8"
regex = "1.10"
futures = "0.3"
sha2 = "0.10"
aws-sdk-s3 = "1.15.0"
aws-config = "1.1.2"
aws-types = "1.1.2"
tokio-util = { version = "0.7", features = ["io"] }
# Local dependencies
common = { path = "common" }
auth = { path = "auth" }
data_api = { path = "data_api" }
control_plane = { path = "control_plane" }
realtime = { path = "realtime" }
storage = { path = "storage" }
functions = { path = "functions" }