Workspaces, group mappings and sign-in methods now come from a configuration file synchronized at startup; workspaces dropped from it are disabled, never deleted. Instance administrators (a new role) see and help every workspace and may delete disabled ones; workspace administrators and employees are derived from the user's groups at every SSO sign-in or administrator edit, and the employee permission set belongs to the workspace. Self-registration is gone: users come from SSO (only when their groups map) or from the administrator. Break-glass bootstrap accounts get an HMAC-derived hourly password that all replicas agree on. First SSO sign-in links a matching email contact to the user. The demo runs on the same model with a generated per-start password. Co-Authored-By: Claude <noreply@anthropic.com>
38 lines
1.1 KiB
TOML
38 lines
1.1 KiB
TOML
[package]
|
|
name = "meguri"
|
|
version = "0.1.0"
|
|
edition = "2024"
|
|
rust-version = "1.97"
|
|
description = "Provider-independent on-call scheduling and configuration control plane"
|
|
publish = false
|
|
|
|
[dependencies]
|
|
argon2 = "0.5.3"
|
|
cot = { version = "=0.7.0", default-features = false, features = ["postgres", "json", "test"] }
|
|
chrono = { version = "0.4.45", features = ["serde"] }
|
|
chrono-tz = "0.10.4"
|
|
csv = "1.4"
|
|
email_address = "0.2"
|
|
reqwest = { version = "0.12.28", default-features = false, features = ["json", "rustls-tls"] }
|
|
serde = { version = "1.0", features = ["derive"] }
|
|
serde_json = "1.0"
|
|
sha2 = "0.10.9"
|
|
thiserror = "2.0"
|
|
tokio = { version = "1.53", features = ["full"] }
|
|
tower-http = { version = "0.6", features = ["trace", "limit"] }
|
|
tracing = "0.1"
|
|
tracing-subscriber = { version = "0.3", features = ["env-filter"] }
|
|
uuid = { version = "1.23", features = ["v4", "serde"] }
|
|
serde_yaml_ng = "0.10.0"
|
|
hmac = "0.12"
|
|
base64 = "0.23.1"
|
|
jsonwebtoken = { version = "11.1.0", default-features = false, features = ["rust_crypto", "use_pem"] }
|
|
|
|
[dev-dependencies]
|
|
http-body-util = "0.1"
|
|
tower = { version = "0.5", features = ["util"] }
|
|
|
|
[profile.release]
|
|
lto = "thin"
|
|
strip = true
|