mart-w/kanidm
1
0
Fork 0
mirror of https://github.com/kanidm/kanidm.git synced 2025-02-24 04:57:00 +01:00
Code Issues Actions 10 Packages Projects Releases Wiki Activity
kanidm/kanidmd/Cargo.toml

110 lines
2.5 KiB
TOML
Raw Normal View History

3 authentication (#79) This adds support for authentication and credential storage to the server. It also adds account recovery and options for integration test fixtures, refactors to make the client library easier to manage, and support clean seperation of the proto vs lib.
2019-09-04 03:06:37 +02:00
# cargo-features = ["default-run"]
[package]
Complete the rename of the project from rsidm to kanidm
2019-09-14 15:44:08 +02:00
name = "kanidm"
(cargo-release) version 1.1.0-alpha.2
2020-10-01 02:04:25 +02:00
version = "1.1.0-alpha.2"
3 authentication (#79) This adds support for authentication and credential storage to the server. It also adds account recovery and options for integration test fixtures, refactors to make the client library easier to manage, and support clean seperation of the proto vs lib.
2019-09-04 03:06:37 +02:00
authors = ["William Brown <william@blackhats.net.au>"]
Complete the rename of the project from rsidm to kanidm
2019-09-14 15:44:08 +02:00
# default-run = "kanidm_core"
3 authentication (#79) This adds support for authentication and credential storage to the server. It also adds account recovery and options for integration test fixtures, refactors to make the client library easier to manage, and support clean seperation of the proto vs lib.
2019-09-04 03:06:37 +02:00
edition = "2018"
20191217 update 1.39 deps (#161) Update to 1.39 + all deps update, and setup cargo.toml's for publishing to crates (to prevent domain/crate squatting).
2019-12-17 06:47:16 +01:00
license = "MPL-2.0"
description = "Kanidm Server Library and Binary"
documentation = "https://docs.rs/kanidm/latest/kanidm/"
Replaced Firstyear
2020-01-17 02:51:15 +01:00
homepage = "https://github.com/kanidm/kanidm/"
repository = "https://github.com/kanidm/kanidm/"
3 authentication (#79) This adds support for authentication and credential storage to the server. It also adds account recovery and options for integration test fixtures, refactors to make the client library easier to manage, and support clean seperation of the proto vs lib.
2019-09-04 03:06:37 +02:00
[lib]
Complete the rename of the project from rsidm to kanidm
2019-09-14 15:44:08 +02:00
name = "kanidm"
3 authentication (#79) This adds support for authentication and credential storage to the server. It also adds account recovery and options for integration test fixtures, refactors to make the client library easier to manage, and support clean seperation of the proto vs lib.
2019-09-04 03:06:37 +02:00
path = "src/lib/lib.rs"
[[bin]]
Complete the rename of the project from rsidm to kanidm
2019-09-14 15:44:08 +02:00
name = "kanidmd"
3 authentication (#79) This adds support for authentication and credential storage to the server. It also adds account recovery and options for integration test fixtures, refactors to make the client library easier to manage, and support clean seperation of the proto vs lib.
2019-09-04 03:06:37 +02:00
path = "src/server/main.rs"
Add concurrent structures, and initial attempt at benchmarking (#173)
2020-01-26 10:55:53 +01:00
# [[bench]]
# name = "kanidm_benchmark"
# harness = false
3 authentication (#79) This adds support for authentication and credential storage to the server. It also adds account recovery and options for integration test fixtures, refactors to make the client library easier to manage, and support clean seperation of the proto vs lib.
2019-09-04 03:06:37 +02:00
[dependencies]
Release Prep (#283)
2020-06-30 06:58:35 +02:00
kanidm_proto = { path = "../kanidm_proto", version = "1.1.0-alpha" }
3 authentication (#79) This adds support for authentication and credential storage to the server. It also adds account recovery and options for integration test fixtures, refactors to make the client library easier to manage, and support clean seperation of the proto vs lib.
2019-09-04 03:06:37 +02:00
13 135 webauthn support (#332) Fixes #13 and Fixes #135 - webauthn and webauthn with cli. This is the core of webauthn, but only as a single factor. Some changes are still needed for webauthn as MFA and as a verified single factor. This will be made in a subsequent PR.
2020-12-02 02:12:07 +01:00
url = "2.1"
tide = "0.15"
314 improve async (#316) this completely removes actix and actix-web from the codebase, replacing it with tokio and http-rs/tide. Due to a current temporary limit in tokio parts with openssl/libressl, rustls is used for the webserver, but I'll change this back once that issue is resolved. For now there are likely some other clippy issues, but the next step now is that I can finally run cargo outdated and update this and the other kanidm/* deps to be up to date due to no longer being held back on versions by actix. So following this, I need to finish clippy warnings, and run cargo outdated and cargo audit.
2020-09-06 00:44:35 +02:00
async-trait = "0.1"
async-h1 = "2.0"
13 135 webauthn support (#332) Fixes #13 and Fixes #135 - webauthn and webauthn with cli. This is the core of webauthn, but only as a single factor. Some changes are still needed for webauthn as MFA and as a verified single factor. This will be made in a subsequent PR.
2020-12-02 02:12:07 +01:00
tide-rustls = "0.1"
250 cookie to auth bearer (#321) Fixes #250, replacing cookies with auth-bearer tokens. This is done using fernet with randomised keys each startup. The reason for this is that in the future the size of the auth token may exceed cookie limits, so we must be able to understand and process auth bearer. Additionaly, this lets us store the tokens for say the kanidm cli as reqwest today can't persist a cookie jar.
2020-09-18 05:19:57 +02:00
fernet = { git = "https://github.com/mozilla-services/fernet-rs.git" }
65 cli options (#85) Add support for command line options to the server. This supports server sid regeneration, persistence, address binding, tls configuration and more. This also improves TLS support in the client tools for CA cert addition to queries.
2019-09-14 10:21:41 +02:00
On login pw upgrade (#315) Fixes #295 on login pw upgrade. This adds support for SSHA512 to be imported at the request of @colbyprior, and adds a delayed action queue so that events can be run after-the-fact so that authentication does not need to exist under the write path.
2020-08-24 04:15:21 +02:00
async-std = "1.6"
3 authentication (#79) This adds support for authentication and credential storage to the server. It also adds account recovery and options for integration test fixtures, refactors to make the client library easier to manage, and support clean seperation of the proto vs lib.
2019-09-04 03:06:37 +02:00
log = "0.4"
Update outdated libraries and add helper make argument.
2020-04-11 02:32:56 +02:00
env_logger = "0.7"
rand = "0.7"
195 rel cleanup (#268) Fixes #195 pre release cleanup. This does a LOT, clippy, formatting, and much much more. It fixes a lot of parts of the book, improves server config and more.
2020-06-18 02:30:42 +02:00
toml = "0.5"
3 authentication (#79) This adds support for authentication and credential storage to the server. It also adds account recovery and options for integration test fixtures, refactors to make the client library easier to manage, and support clean seperation of the proto vs lib.
2019-09-04 03:06:37 +02:00
chrono = "0.4"
regex = "1"
lazy_static = "1.2.0"
Refactor for actix and futures upgrade (#190)
2020-03-07 01:49:39 +01:00
futures = "0.3"
314 improve async (#316) this completely removes actix and actix-web from the codebase, replacing it with tokio and http-rs/tide. Due to a current temporary limit in tokio parts with openssl/libressl, rustls is used for the webserver, but I'll change this back once that issue is resolved. For now there are likely some other clippy issues, but the next step now is that I can finally run cargo outdated and update this and the other kanidm/* deps to be up to date due to no longer being held back on versions by actix. So following this, I need to finish clippy warnings, and run cargo outdated and cargo audit.
2020-09-06 00:44:35 +02:00
futures-util = "0.3"
tokio = { version = "0.2", features = ["rt-threaded", "macros", "rt-util", "sync", "time", "net", "io-util", "signal"] }
Xxx clippy outdated (#318) This finishes some of the outstanding clippy issues that existed. Additionally, we updated all the project deps and updated libraries we could in the project. A bug exists currently in cargo outdated that is preventing further updates to this however, but that's a bit out of my hands.
2020-09-08 04:46:10 +02:00
tokio-util = { version = "0.3", features = ["codec"] }
314 improve async (#316) this completely removes actix and actix-web from the codebase, replacing it with tokio and http-rs/tide. Due to a current temporary limit in tokio parts with openssl/libressl, rustls is used for the webserver, but I'll change this back once that issue is resolved. For now there are likely some other clippy issues, but the next step now is that I can finally run cargo outdated and update this and the other kanidm/* deps to be up to date due to no longer being held back on versions by actix. So following this, I need to finish clippy warnings, and run cargo outdated and cargo audit.
2020-09-06 00:44:35 +02:00
tokio-openssl = "0.4"
openssl = "0.10"
Update outdated libraries and add helper make argument.
2020-04-11 02:32:56 +02:00
uuid = { version = "0.8", features = ["serde", "v4" ] }
3 authentication (#79) This adds support for authentication and credential storage to the server. It also adds account recovery and options for integration test fixtures, refactors to make the client library easier to manage, and support clean seperation of the proto vs lib.
2019-09-04 03:06:37 +02:00
serde = "1.0"
Update outdated libraries and add helper make argument.
2020-04-11 02:32:56 +02:00
serde_cbor = "0.11"
3 authentication (#79) This adds support for authentication and credential storage to the server. It also adds account recovery and options for integration test fixtures, refactors to make the client library easier to manage, and support clean seperation of the proto vs lib.
2019-09-04 03:06:37 +02:00
serde_json = "1.0"
serde_derive = "1.0"
Release Prep (#283)
2020-06-30 06:58:35 +02:00
libsqlite3-sys = { version = "0.18" }
rusqlite = { version = "0.23", features = ["backup"] }
3 authentication (#79) This adds support for authentication and credential storage to the server. It also adds account recovery and options for integration test fixtures, refactors to make the client library easier to manage, and support clean seperation of the proto vs lib.
2019-09-04 03:06:37 +02:00
r2d2 = "0.8"
Release Prep (#283)
2020-06-30 06:58:35 +02:00
r2d2_sqlite = "0.16"
3 authentication (#79) This adds support for authentication and credential storage to the server. It also adds account recovery and options for integration test fixtures, refactors to make the client library easier to manage, and support clean seperation of the proto vs lib.
2019-09-04 03:06:37 +02:00
Update outdated libraries and add helper make argument.
2020-04-11 02:32:56 +02:00
structopt = { version = "0.3", default-features = false }
Account valid-from and expiry (#322) Fixes #59 account policy and lockout. This is achived with a valid_from and expire attribute that are timestamps. Cli tools are added to manage these.
2020-10-10 02:31:51 +02:00
time = { version = "0.2", features = ["serde", "std"] }
3 authentication (#79) This adds support for authentication and credential storage to the server. It also adds account recovery and options for integration test fixtures, refactors to make the client library easier to manage, and support clean seperation of the proto vs lib.
2019-09-04 03:06:37 +02:00
refint improve (#274) Fixes #61 and fixes #234 - this rewrites quite a few internals of refint and memberof to make them much more efficient compared to previously. This takes nearly 70s out of the test execution time - a full 25% of the run time of tests. A number of other improvements have been made through out with regard to memory pre-alloc for hashset/hashmap, fixing some more types, and reducing some un-needed allocations.
2020-06-26 03:36:37 +02:00
hashbrown = "0.8"
Fixes #324 account softlocking and rate limiting (#326) This provides bruteforce protection and ratelimiting to stop classes of attacks. This impacts all areas where a password or authentication is performed (unix, ldap, auth).
2020-10-22 06:40:31 +02:00
concread = "^0.2.5"
13 135 webauthn support (#332) Fixes #13 and Fixes #135 - webauthn and webauthn with cli. This is the core of webauthn, but only as a single factor. Some changes are still needed for webauthn as MFA and as a verified single factor. This will be made in a subsequent PR.
2020-12-02 02:12:07 +01:00
# concread = { version = "^0.2.5", features = ["simd_support"] }
101 idlcache (#224) Fixes #101, concurrent caching of IDL and Entries. This yields a 10% improvement for test case execution, and 35% for tests run under --release mode. A lot of code around the code base was needed to be touched due to the extra need for mut in some operations and some lifetimes, but the majority of the work was in idl_arc_sqlite.rs, which has the cache layer. There are many performance gains yet to see, but most of those will come through improvement of the concread ARC and it's related BTree implementation.
2020-05-11 13:12:32 +02:00
# concread = { path = "../../concread" }
13 135 webauthn support (#332) Fixes #13 and Fixes #135 - webauthn and webauthn with cli. This is the core of webauthn, but only as a single factor. Some changes are still needed for webauthn as MFA and as a verified single factor. This will be made in a subsequent PR.
2020-12-02 02:12:07 +01:00
# concread = { path = "../../concread", features = ["asynch"] }
Xxx clippy outdated (#318) This finishes some of the outstanding clippy issues that existed. Additionally, we updated all the project deps and updated libraries we could in the project. A bug exists currently in cargo outdated that is preventing further updates to this however, but that's a bit out of my hands.
2020-09-08 04:46:10 +02:00
# crossbeam = "0.7"
3 authentication (#79) This adds support for authentication and credential storage to the server. It also adds account recovery and options for integration test fixtures, refactors to make the client library easier to manage, and support clean seperation of the proto vs lib.
2019-09-04 03:06:37 +02:00
Release Prep (#283)
2020-06-30 06:58:35 +02:00
sshkeys = "0.3"
3 authentication (#79) This adds support for authentication and credential storage to the server. It also adds account recovery and options for integration test fixtures, refactors to make the client library easier to manage, and support clean seperation of the proto vs lib.
2019-09-04 03:06:37 +02:00
Update outdated libraries and add helper make argument.
2020-04-11 02:32:56 +02:00
rpassword = "4.0"
65 cli options (#85) Add support for command line options to the server. This supports server sid regeneration, persistence, address binding, tls configuration and more. This also improves TLS support in the client tools for CA cert addition to queries.
2019-09-14 10:21:41 +02:00
num_cpus = "1.10"
3 authentication (#79) This adds support for authentication and credential storage to the server. It also adds account recovery and options for integration test fixtures, refactors to make the client library easier to manage, and support clean seperation of the proto vs lib.
2019-09-04 03:06:37 +02:00
Test perf improvements
2020-03-26 02:27:04 +01:00
idlset = { version = "0.1" , features = ["use_smallvec"] }
101 idlcache (#224) Fixes #101, concurrent caching of IDL and Entries. This yields a 10% improvement for test case execution, and 35% for tests run under --release mode. A lot of code around the code base was needed to be touched due to the extra need for mut in some operations and some lifetimes, but the majority of the work was in idl_arc_sqlite.rs, which has the cache layer. There are many performance gains yet to see, but most of those will come through improvement of the concread ARC and it's related BTree implementation.
2020-05-11 13:12:32 +02:00
# idlset = { path = "../../idlset", features = ["use_smallvec"] }
Test perf improvements
2020-03-26 02:27:04 +01:00
29 password badlisting (#158) Implements #29 password badlist and quality checking. This checks all new passwords are at least length 10, pass zxcvbn and are not container in a badlist. The current badlist is a preprocessed content of rockyou from seclists, but later wwe'll update this to the top 10million badlist which when processed is about 70k entries..
2019-12-12 23:49:32 +01:00
zxcvbn = "2.0"
122 password import design (#196) Implements #122 password import. This adds most of the server core framework to allow password imports from other sources, with new types easily able to be added in credential.rs.
2020-03-26 23:27:07 +01:00
base64 = "0.12"
Implement #8 indexing - today this is only eq and pres indexes, but (#102) it does handle the cases correctly for test threshold, andnot, or, and and exists shortcuts. It's also extremely well tested!
2019-09-25 12:38:20 +02:00
199 ldap gateway (#246) adds an LDAP gateway to the server. It supports TLS if configured for the webserver, using the same parameters. It is a read only interface, only supporting bind via the configured posix password.
2020-06-10 04:07:43 +02:00
ldap3_server = "0.1"
# ldap3_server = { path = "../../ldap3_server" }
13 135 webauthn support (#332) Fixes #13 and Fixes #135 - webauthn and webauthn with cli. This is the core of webauthn, but only as a single factor. Some changes are still needed for webauthn as MFA and as a verified single factor. This will be made in a subsequent PR.
2020-12-02 02:12:07 +01:00
webauthn-rs = "0.3.0-alpha.1"
# webauthn-rs = { path = "../../webauthn-rs" }
Improve server hardening This adds a number of warnings to the server to help administrators make better informed decisions about the security of their environment.
2020-07-28 08:55:58 +02:00
libc = "0.2"
users = "0.10"
Fix sqlite fails in CI tests and fmt error Add `libsqlite3-sys` crate to avoid sqlite3 missmatching version. From [https://lib.rs/crates/libsqlite3-sys](https://lib.rs/crates/libsqlite3-sys) > If you use the bundled feature, libsqlite3-sys will use the cc crate to compile SQLite from source and link against that. This source is embedded in the libsqlite3-sys crate and is currently SQLite 3.30.1 (as of rusqlite 0.21.0 / libsqlite3-sys 0.17.0). This is probably the simplest solution to any build problems. Remove sqlite OS packages dependencies for build. Also, we fix a format error to allow CI tests to pass again.
2020-05-01 19:24:28 +02:00
[features]
13 135 webauthn support (#332) Fixes #13 and Fixes #135 - webauthn and webauthn with cli. This is the core of webauthn, but only as a single factor. Some changes are still needed for webauthn as MFA and as a verified single factor. This will be made in a subsequent PR.
2020-12-02 02:12:07 +01:00
# default = [ "libsqlite3-sys/bundled", "openssl/vendored" ]
Fix sqlite fails in CI tests and fmt error Add `libsqlite3-sys` crate to avoid sqlite3 missmatching version. From [https://lib.rs/crates/libsqlite3-sys](https://lib.rs/crates/libsqlite3-sys) > If you use the bundled feature, libsqlite3-sys will use the cc crate to compile SQLite from source and link against that. This source is embedded in the libsqlite3-sys crate and is currently SQLite 3.30.1 (as of rusqlite 0.21.0 / libsqlite3-sys 0.17.0). This is probably the simplest solution to any build problems. Remove sqlite OS packages dependencies for build. Also, we fix a format error to allow CI tests to pass again.
2020-05-01 19:24:28 +02:00
Add concurrent structures, and initial attempt at benchmarking (#173)
2020-01-26 10:55:53 +01:00
[dev-dependencies]
criterion = "0.3"
13 135 webauthn support (#332) Fixes #13 and Fixes #135 - webauthn and webauthn with cli. This is the core of webauthn, but only as a single factor. Some changes are still needed for webauthn as MFA and as a verified single factor. This will be made in a subsequent PR.
2020-12-02 02:12:07 +01:00
# For testing webauthn
webauthn-authenticator-rs = "0.3.0-alpha.1"
# webauthn-authenticator-rs = { path = "../../webauthn-authenticator-rs" }
Add concurrent structures, and initial attempt at benchmarking (#173)
2020-01-26 10:55:53 +01:00
CI update all kanidm component version and tag Add make entry to have all cargo versions updated from VERSION file. Add `tag_version` github action to update all cargo.toml and tag it and push it. Remove cargo fmt check from CI because we have problems with different versions and fails continually. Instead, we use cargo-husky to ensure that all people run it automatically in its local, but this is not obligatory. Update to version 1.0.0-rc10, according to packages published. In future cargo will support managing all dependencies from main Cargo.toml. Ref: https://github.com/rust-lang/cargo/issues/3931 Resolve #225
2020-05-11 14:16:09 +02:00
[dev-dependencies.cargo-husky]
version = "1"
default-features = false # Disable features which are enabled by default
features = ["precommit-hook", "run-cargo-fmt"]
Reference in a new issue Copy permalink