feat(security): add support for JWT credentials

.github/workflows/ci.yml

@@ -62,7 +62,7 @@ jobs:
  run: cargo test
 
  - name: Build (default features)
- run: cargo build --release
+ run: cargo build --workspace --release
 
  - name: Clippy
- run: cargo clippy --all-targets -- -D warnings
+ run: cargo clippy --workspace --all-targets -- -D warnings

.husky/pre-push

@@ -16,9 +16,9 @@ then
  exit 1
 fi
 
-if ! cargo clippy --all-targets -- -D warnings
+if ! cargo clippy --all --all-targets -- -D warnings
 then
- echo "There are some clippy issues."
+ echo "There are some Clippy issues."
  exit 1
 fi
 

Cargo.toml

@@ -9,9 +9,15 @@ edition = "2021"
 name = "secutils"
 path = "src/main.rs"
 
+[workspace]
+members = [
+ "dev/crates/*"
+]
+
 [dependencies]
 actix-cors = "0.7.0"
 actix-web = "4.5.1"
+actix-web-httpauth = "0.8.1"
 anyhow = "1.0.83"
 async-stream = "0.3.5"
 bytes = "1.6.0"
@@ -30,6 +36,7 @@ hex = "0.4.3"
 html5ever = "0.27.0"
 humantime = "2.1.0"
 itertools = "0.12.1"
+jsonwebtoken = {version = "9.3.0", default-features = false }
 lettre = { version = "0.11.7", default-features = false }
 log = "0.4.21"
 openssl = "0.10.64"
@@ -70,6 +77,7 @@ default = [
  "clap/cargo",
  "clap/env",
  "content-security-policy/serde",
+ "figment/env",
  "figment/toml",
  "handlebars/rust-embed",
  "insta/filters",

Dockerfile

@@ -21,8 +21,9 @@ RUN set -x && \
  apt-get install -y pkg-config curl libssl-dev cmake libssl-dev:arm64 g++-aarch64-linux-gnu libc6-dev-arm64-cross protobuf-compiler ca-certificates && \
  rustup target add aarch64-unknown-linux-gnu
 
-# Copy assets and manifest.
+# Copy assets, member crates, and manifest.
 COPY ["./assets", "./assets"]
+COPY ["./dev/crates", "./dev/crates"]
 COPY ["./Cargo.lock", "./Cargo.toml", "./"]
 
 # Fetch dependencies if they change.