[package]
name = "server"
version = "0.1.0"
edition = "2024"

[lib]
name = "server"
path = "src/lib.rs"

[[bin]]
name = "server"
path = "src/main.rs"

[dependencies]
axum = "0.8"
base64 = "0.22"
oauth-core = { path = "../oauth-core" }
rand = "0.9"
reqwest = { version = "0.12", default-features = false, features = ["rustls-tls", "json"] }
secrecy = { version = "0.10.3", features = ["serde"] }
serde = { version = "1.0", features = ["derive"] }
serde_json = "1.0"
subtle = "2.6"
thiserror = "2.0"
tokio = { version = "1.53", features = ["rt-multi-thread", "macros", "signal", "net"] }
tower = { version = "0.5", features = ["util"] }
tower-http = { version = "0.7", features = ["fs", "trace", "set-header"] }
tracing = "0.1"
tracing-subscriber = { version = "0.3", features = ["env-filter"] }
url = "2.5"

[dev-dependencies]
rcgen = "0.14"
# `ring`-only provider: disabling the default features keeps `aws-lc-rs` (and
# its `aws-lc-sys` C build) out of the dependency graph, matching the static
# musl runtime build and the reqwest `rustls-tls` feature set.
rustls = { version = "0.23", default-features = false, features = ["ring", "std", "tls12"] }
tempfile = "3.23"
tokio = { version = "1.53", features = ["rt-multi-thread", "macros", "signal", "net"] }
tokio-rustls = { version = "0.26", default-features = false, features = ["ring", "tls12", "logging"] }
wiremock = "0.6"

[lints.rust]
unsafe_code = "forbid"