medallion/Cargo.toml

[package]
authors = ["Thomas Gideon <cmdln@thecommandline.net>"]
categories = ["cryptography", "authentication", "web-programming", "data-structures"]
description = "JWT library for rust using serde, serde_json and openssl"
homepage = "https://gitea.cmdln.net/cmdln/medallion"
keywords = ["JWT", "token", "web", "JSON", "RSA"]
license = "MIT"
name = "medallion"
readme = "README.md"
repository = "https://gitea.cmdln.net/cmdln/medallion"
version = "2.5.0"
edition = "2018"
[badges]
[badges.travis-ci]
branch = "master"
repository = "https://travis-ci.org/cmdln/medallion"

[dependencies]
base64 = "~0.13.0"
openssl = "~0.10.15"
serde = { version = "^1.0.114", features = [ "derive" ] }
serde_json = "^1.0.55"
anyhow = "^1.0.31"
time = "~0.3"
Initial re-factor 2017-02-13 23:40:07 +00:00			`[package]`
			`authors = ["Thomas Gideon <cmdln@thecommandline.net>"]`
Add defaults for generic parameters (#5) 2018-08-05 16:03:58 +00:00			`categories = ["cryptography", "authentication", "web-programming", "data-structures"]`
Initial re-factor 2017-02-13 23:40:07 +00:00			`description = "JWT library for rust using serde, serde_json and openssl"`
Move repository 2021-12-03 19:09:49 +00:00			`homepage = "https://gitea.cmdln.net/cmdln/medallion"`
Add a few more keywords. 2017-03-14 18:24:56 +00:00			`keywords = ["JWT", "token", "web", "JSON", "RSA"]`
Initial re-factor 2017-02-13 23:40:07 +00:00			`license = "MIT"`
Add defaults for generic parameters (#5) 2018-08-05 16:03:58 +00:00			`name = "medallion"`
			`readme = "README.md"`
Move repository 2021-12-03 19:09:49 +00:00			`repository = "https://gitea.cmdln.net/cmdln/medallion"`
Increment version 2022-02-19 13:32:44 +00:00			`version = "2.5.0"`
Migrated to anyhow and chrono from failure and time crates. 2020-06-22 15:52:53 +00:00			`edition = "2018"`
Add defaults for generic parameters (#5) 2018-08-05 16:03:58 +00:00			`[badges]`
			`[badges.travis-ci]`
			`branch = "master"`
Switch to failure (#6) * Switch to failure * Bump version 2018-11-16 22:28:01 +00:00			`repository = "https://travis-ci.org/cmdln/medallion"`
Initial re-factor 2017-02-13 23:40:07 +00:00
			`[dependencies]`
Update base64 dep 2021-04-20 13:25:42 +00:00			`base64 = "~0.13.0"`
Switch to failure (#6) * Switch to failure * Bump version 2018-11-16 22:28:01 +00:00			`openssl = "~0.10.15"`
Migrated to anyhow and chrono from failure and time crates. 2020-06-22 15:52:53 +00:00			`serde = { version = "^1.0.114", features = [ "derive" ] }`
			`serde_json = "^1.0.55"`
			`anyhow = "^1.0.31"`
Replace usage of chrono with time crate The time crate is the underlying crate which chrono uses for its various operations. Unfortunately, chrono is unmaintained and older versions of the time crate have security vulnerabilites[0] which are unfixed in chrono[1]. The medallion code does not use any chrono-specific features and all uses of it could be trivially replaced with the underlying time structs. Note that this change adds calls to `expect`. Where these calls are made, the previous chrono functions also panicked internally if out-of-range values were passed. We noticed this issue while doing a similar refactoring in a program that also uses medallion[2]. [0]: https://rustsec.org/advisories/RUSTSEC-2020-0071.html [1]: https://rustsec.org/advisories/RUSTSEC-2020-0159.html [2]: https://cl.tvl.fyi/c/depot/+/5311 2022-02-18 10:18:40 +00:00			`time = "~0.3"`