2018-02-10 01:00:55 +01:00
|
|
|
[package]
|
2021-04-27 23:18:32 +02:00
|
|
|
name = "vaultwarden"
|
2018-08-21 22:21:54 +02:00
|
|
|
version = "1.0.0"
|
2018-02-10 01:00:55 +01:00
|
|
|
authors = ["Daniel García <dani-garcia@users.noreply.github.com>"]
|
2021-11-05 19:18:54 +01:00
|
|
|
edition = "2021"
|
2023-12-04 20:26:11 +01:00
|
|
|
rust-version = "1.72.1"
|
2021-09-22 20:26:48 +02:00
|
|
|
resolver = "2"
|
2018-02-10 01:00:55 +01:00
|
|
|
|
2021-04-27 23:18:32 +02:00
|
|
|
repository = "https://github.com/dani-garcia/vaultwarden"
|
2018-12-30 00:04:22 +01:00
|
|
|
readme = "README.md"
|
2022-06-16 15:13:10 +02:00
|
|
|
license = "AGPL-3.0-only"
|
2018-12-30 00:04:22 +01:00
|
|
|
publish = false
|
|
|
|
build = "build.rs"
|
|
|
|
|
2018-12-06 20:35:25 +01:00
|
|
|
[features]
|
2021-11-07 18:53:39 +01:00
|
|
|
# default = ["sqlite"]
|
2019-03-29 20:27:20 +01:00
|
|
|
# Empty to keep compatibility, prefer to set USE_SYSLOG=true
|
|
|
|
enable_syslog = []
|
2019-05-27 22:58:52 +02:00
|
|
|
mysql = ["diesel/mysql", "diesel_migrations/mysql"]
|
2020-01-18 20:09:52 +01:00
|
|
|
postgresql = ["diesel/postgres", "diesel_migrations/postgres"]
|
2019-05-27 23:31:56 +02:00
|
|
|
sqlite = ["diesel/sqlite", "diesel_migrations/sqlite", "libsqlite3-sys"]
|
2020-09-25 23:23:13 +02:00
|
|
|
# Enable to use a vendored and statically linked openssl
|
|
|
|
vendored_openssl = ["openssl/vendored"]
|
2022-03-20 18:51:24 +01:00
|
|
|
# Enable MiMalloc memory allocator to replace the default malloc
|
|
|
|
# This can improve performance for Alpine builds
|
|
|
|
enable_mimalloc = ["mimalloc"]
|
2022-12-03 18:25:59 +01:00
|
|
|
# This is a development dependency, and should only be used during development!
|
|
|
|
# It enables the usage of the diesel_logger crate, which is able to output the generated queries.
|
|
|
|
# You also need to set an env variable `QUERY_LOGGER=1` to fully activate this so you do not have to re-compile
|
|
|
|
# if you want to turn off the logging for a specific run.
|
|
|
|
query_logger = ["diesel_logger"]
|
2018-12-06 20:35:25 +01:00
|
|
|
|
2020-07-14 23:44:01 +02:00
|
|
|
# Enable unstable features, requires nightly
|
2020-09-11 23:52:20 +02:00
|
|
|
# Currently only used to enable rusts official ip support
|
2020-07-14 23:44:01 +02:00
|
|
|
unstable = []
|
|
|
|
|
2019-04-02 22:35:22 +02:00
|
|
|
[target."cfg(not(windows))".dependencies]
|
2022-02-07 22:26:22 +01:00
|
|
|
# Logging
|
2023-04-30 17:18:12 +02:00
|
|
|
syslog = "6.1.0"
|
2019-04-02 22:35:22 +02:00
|
|
|
|
2018-02-10 01:00:55 +01:00
|
|
|
[dependencies]
|
2022-02-07 22:26:22 +01:00
|
|
|
# Logging
|
2023-08-28 16:48:42 +02:00
|
|
|
log = "0.4.20"
|
2023-09-22 17:03:41 +02:00
|
|
|
fern = { version = "0.6.2", features = ["syslog-6", "reopen-1"] }
|
2023-10-23 00:18:38 +02:00
|
|
|
tracing = { version = "0.1.40", features = ["log"] } # Needed to have lettre and webauthn-rs trace logging to work
|
2022-05-04 21:13:05 +02:00
|
|
|
|
2022-02-07 22:26:22 +01:00
|
|
|
# A `dotenv` implementation for Rust
|
2023-03-22 21:30:07 +01:00
|
|
|
dotenvy = { version = "0.15.7", default-features = false }
|
2021-05-16 15:29:13 +02:00
|
|
|
|
2022-02-07 22:26:22 +01:00
|
|
|
# Lazy initialization
|
2023-06-04 22:14:51 +02:00
|
|
|
once_cell = "1.18.0"
|
2018-02-10 01:00:55 +01:00
|
|
|
|
2022-02-07 22:26:22 +01:00
|
|
|
# Numerical libraries
|
2023-10-23 00:18:38 +02:00
|
|
|
num-traits = "0.2.17"
|
|
|
|
num-derive = "0.4.1"
|
2022-02-07 22:26:22 +01:00
|
|
|
|
|
|
|
# Web framework
|
2023-12-04 20:26:11 +01:00
|
|
|
rocket = { version = "0.5.0", features = ["tls", "json"], default-features = false }
|
|
|
|
rocket_ws = { version ="0.1.0" }
|
2018-08-30 17:43:46 +02:00
|
|
|
|
2022-02-07 22:26:22 +01:00
|
|
|
# WebSockets libraries
|
2023-11-15 10:41:14 +01:00
|
|
|
tokio-tungstenite = "0.20.1"
|
2023-06-11 18:11:09 +02:00
|
|
|
rmpv = "1.0.1" # MessagePack library
|
2023-02-08 17:13:14 +01:00
|
|
|
|
|
|
|
# Concurrent HashMap used for WebSocket messaging and favicons
|
2023-08-28 16:48:42 +02:00
|
|
|
dashmap = "5.5.3"
|
2018-08-30 17:43:46 +02:00
|
|
|
|
2022-02-07 22:26:22 +01:00
|
|
|
# Async futures
|
2023-11-15 10:41:14 +01:00
|
|
|
futures = "0.3.29"
|
|
|
|
tokio = { version = "1.34.0", features = ["rt-multi-thread", "fs", "io-util", "parking_lot", "time", "signal"] }
|
2018-08-30 17:43:46 +02:00
|
|
|
|
2018-02-10 01:00:55 +01:00
|
|
|
# A generic serialization/deserialization framework
|
2023-12-04 20:26:11 +01:00
|
|
|
serde = { version = "1.0.193", features = ["derive"] }
|
2023-11-15 10:41:14 +01:00
|
|
|
serde_json = "1.0.108"
|
2018-12-06 20:35:25 +01:00
|
|
|
|
2018-02-10 01:00:55 +01:00
|
|
|
# A safe, extensible ORM and Query builder
|
2023-11-15 10:41:14 +01:00
|
|
|
diesel = { version = "2.1.4", features = ["chrono", "r2d2"] }
|
2023-05-26 14:53:13 +02:00
|
|
|
diesel_migrations = "2.1.0"
|
2023-06-04 22:14:51 +02:00
|
|
|
diesel_logger = { version = "0.3.0", optional = true }
|
2019-05-26 23:02:41 +02:00
|
|
|
|
2023-02-08 17:13:14 +01:00
|
|
|
# Bundled/Static SQLite
|
2023-11-15 10:41:14 +01:00
|
|
|
libsqlite3-sys = { version = "0.27.0", features = ["bundled"], optional = true }
|
2018-05-07 21:33:54 +02:00
|
|
|
|
2020-08-23 01:07:53 +02:00
|
|
|
# Crypto-related libraries
|
2022-06-04 15:13:10 +02:00
|
|
|
rand = { version = "0.8.5", features = ["small_rng"] }
|
Several small fixes for open issues (#4143)
* Fix BWDC when re-run with cleared cache
Using the BWDC with a cleared cache caused invited users to be converted
to accepted users.
The problem was a wrong check for the `restore` function.
Fixes #4114
* Remove useless variable
During some refactoring this seems to be overlooked.
This variable gets filled but isn't used at all afterwards.
Fixes #4105
* Check some `.git` paths to force a rebuild
When a checked-out repo switches to a specific tag, and that tag does
not have anything else changed in the files except the tag, it could
happen that the build process doesn't see any changes, while it could be
that the version string needs to be different.
This commit ensures that if some specific paths are changed within the
.git directory, cargo will be triggered to rebuild.
Fixes #4087
* Do not delete dir on file delete
Previously during a `delete_file` check we also tried to delete the
parent directory and ignored all errors, like not being empty for
example.
Since this function is called `delete_file` and does not mention
anything in regards to a directory i have removed that code and it will
now only delete the file and leave the rest as-is.
If this somehow is still needed or wanted, which i do not think we want,
then we should create a new function.
Fixes #4081
* Fix healthcheck when using an ENV file
If someone is using a `.env` file or configured the `ENV_FILE` variable
to use that as it's configuration, this was missed by the healthcheck.
So, `DOMAIN` and `ROCKET_TLS` were not seen, and not used in these cases.
This commit fixes this by checking for this file and if it exists, then
it will load those variables first.
Fixes #4112
* Add missing route
While there was a function and a derive, this endpoint wasn't part of
the routes. Since Bitwarden does have this endpoint ill add the route
instead of deleting it.
Fixes #4076
Fixes #4144
* Update crates to update the openssl crate
Because of a bug in the openssl-sys crate we pinned the version to an
older version. This issue has been fixed and was released 2 days ago.
This commit updates the openssl crates including others.
This should also fix the issues with building Vaultwarden using newer
versions of LibreSSL.
Fixes #4051
2023-12-09 01:21:14 +01:00
|
|
|
ring = "0.17.7"
|
2018-02-10 01:00:55 +01:00
|
|
|
|
|
|
|
# UUID generation
|
2023-12-04 20:26:11 +01:00
|
|
|
uuid = { version = "1.6.1", features = ["v4"] }
|
2018-02-10 01:00:55 +01:00
|
|
|
|
2020-07-08 06:30:18 +02:00
|
|
|
# Date and time libraries
|
2023-10-23 00:18:38 +02:00
|
|
|
chrono = { version = "0.4.31", features = ["clock", "serde"], default-features = false }
|
2023-11-15 10:41:14 +01:00
|
|
|
chrono-tz = "0.8.4"
|
2023-10-23 00:18:38 +02:00
|
|
|
time = "0.3.30"
|
2018-02-10 01:00:55 +01:00
|
|
|
|
2021-04-03 05:16:49 +02:00
|
|
|
# Job scheduler
|
2023-02-08 17:13:14 +01:00
|
|
|
job_scheduler_ng = "2.0.4"
|
2021-04-03 05:16:49 +02:00
|
|
|
|
2022-02-07 22:26:22 +01:00
|
|
|
# Data encoding library Hex/Base32/Base64
|
2023-12-04 20:26:11 +01:00
|
|
|
data-encoding = "2.5.0"
|
2018-02-10 01:00:55 +01:00
|
|
|
|
|
|
|
# JWT library
|
2023-12-04 20:26:11 +01:00
|
|
|
jsonwebtoken = "9.2.0"
|
2018-02-10 01:00:55 +01:00
|
|
|
|
2022-02-07 22:26:22 +01:00
|
|
|
# TOTP library
|
2023-11-15 10:41:14 +01:00
|
|
|
totp-lite = "2.0.1"
|
2018-07-12 21:46:50 +02:00
|
|
|
|
2018-11-16 02:34:17 +01:00
|
|
|
# Yubico Library
|
2022-05-11 22:03:07 +02:00
|
|
|
yubico = { version = "0.11.0", features = ["online-tokio"], default-features = false }
|
2018-11-16 02:34:17 +01:00
|
|
|
|
2022-03-27 17:25:04 +02:00
|
|
|
# WebAuthn libraries
|
2022-02-07 22:26:22 +01:00
|
|
|
webauthn-rs = "0.3.2"
|
2018-02-10 01:00:55 +01:00
|
|
|
|
2023-02-08 17:13:14 +01:00
|
|
|
# Handling of URL's for WebAuthn and favicons
|
2023-12-04 20:26:11 +01:00
|
|
|
url = "2.5.0"
|
2018-07-12 21:46:50 +02:00
|
|
|
|
2023-02-08 17:13:14 +01:00
|
|
|
# Email libraries
|
2023-12-04 20:26:11 +01:00
|
|
|
lettre = { version = "0.11.2", features = ["smtp-transport", "sendmail-transport", "builder", "serde", "tokio1-native-tls", "hostname", "tracing", "tokio1"], default-features = false }
|
|
|
|
percent-encoding = "2.3.1" # URL encoding library used for URL's in the emails
|
2022-11-04 12:56:02 +01:00
|
|
|
email_address = "0.2.4"
|
2018-08-15 08:32:19 +02:00
|
|
|
|
2023-02-08 17:13:14 +01:00
|
|
|
# HTML Template library
|
2023-11-15 10:41:14 +01:00
|
|
|
handlebars = { version = "4.5.0", features = ["dir_source"] }
|
2019-01-13 01:39:29 +01:00
|
|
|
|
2023-02-08 17:13:14 +01:00
|
|
|
# HTTP client (Used for favicons, version check, DUO and HIBP API)
|
2023-10-23 00:18:38 +02:00
|
|
|
reqwest = { version = "0.11.22", features = ["stream", "json", "deflate", "gzip", "brotli", "socks", "cookies", "trust-dns", "native-tls-alpn"] }
|
2022-02-07 22:26:22 +01:00
|
|
|
|
2023-02-08 17:13:14 +01:00
|
|
|
# Favicon extraction libraries
|
2023-06-11 18:11:09 +02:00
|
|
|
html5gum = "0.5.7"
|
2023-10-23 00:18:38 +02:00
|
|
|
regex = { version = "1.10.2", features = ["std", "perf", "unicode-perl"], default-features = false }
|
2023-12-04 20:26:11 +01:00
|
|
|
data-url = "0.3.1"
|
2023-10-23 00:18:38 +02:00
|
|
|
bytes = "1.5.0"
|
2023-02-08 17:13:14 +01:00
|
|
|
|
|
|
|
# Cache function results (Used for version check and favicon fetching)
|
2023-11-15 10:41:14 +01:00
|
|
|
cached = { version = "0.46.1", features = ["async"] }
|
2022-02-07 22:26:22 +01:00
|
|
|
|
|
|
|
# Used for custom short lived cookie jar during favicon extraction
|
2023-01-09 16:49:26 +01:00
|
|
|
cookie = "0.16.2"
|
2023-06-21 22:01:05 +02:00
|
|
|
cookie_store = "0.19.1"
|
2019-01-27 15:39:19 +01:00
|
|
|
|
2023-02-08 17:13:14 +01:00
|
|
|
# Used by U2F, JWT and PostgreSQL
|
Several small fixes for open issues (#4143)
* Fix BWDC when re-run with cleared cache
Using the BWDC with a cleared cache caused invited users to be converted
to accepted users.
The problem was a wrong check for the `restore` function.
Fixes #4114
* Remove useless variable
During some refactoring this seems to be overlooked.
This variable gets filled but isn't used at all afterwards.
Fixes #4105
* Check some `.git` paths to force a rebuild
When a checked-out repo switches to a specific tag, and that tag does
not have anything else changed in the files except the tag, it could
happen that the build process doesn't see any changes, while it could be
that the version string needs to be different.
This commit ensures that if some specific paths are changed within the
.git directory, cargo will be triggered to rebuild.
Fixes #4087
* Do not delete dir on file delete
Previously during a `delete_file` check we also tried to delete the
parent directory and ignored all errors, like not being empty for
example.
Since this function is called `delete_file` and does not mention
anything in regards to a directory i have removed that code and it will
now only delete the file and leave the rest as-is.
If this somehow is still needed or wanted, which i do not think we want,
then we should create a new function.
Fixes #4081
* Fix healthcheck when using an ENV file
If someone is using a `.env` file or configured the `ENV_FILE` variable
to use that as it's configuration, this was missed by the healthcheck.
So, `DOMAIN` and `ROCKET_TLS` were not seen, and not used in these cases.
This commit fixes this by checking for this file and if it exists, then
it will load those variables first.
Fixes #4112
* Add missing route
While there was a function and a derive, this endpoint wasn't part of
the routes. Since Bitwarden does have this endpoint ill add the route
instead of deleting it.
Fixes #4076
Fixes #4144
* Update crates to update the openssl crate
Because of a bug in the openssl-sys crate we pinned the version to an
older version. This issue has been fixed and was released 2 days ago.
This commit updates the openssl crates including others.
This should also fix the issues with building Vaultwarden using newer
versions of LibreSSL.
Fixes #4051
2023-12-09 01:21:14 +01:00
|
|
|
openssl = "0.10.61"
|
2019-09-12 22:12:22 +02:00
|
|
|
|
2020-03-02 20:57:06 +01:00
|
|
|
# CLI argument parsing
|
2022-06-04 19:16:36 +02:00
|
|
|
pico-args = "0.5.0"
|
2020-03-02 20:57:06 +01:00
|
|
|
|
2020-08-18 17:15:44 +02:00
|
|
|
# Macro ident concatenation
|
2023-06-11 18:11:09 +02:00
|
|
|
paste = "1.0.14"
|
|
|
|
governor = "0.6.0"
|
2020-08-18 17:15:44 +02:00
|
|
|
|
2022-11-07 17:13:34 +01:00
|
|
|
# Check client versions for specific features.
|
2023-10-23 00:18:38 +02:00
|
|
|
semver = "1.0.20"
|
2022-11-07 17:13:34 +01:00
|
|
|
|
2022-03-20 18:51:24 +01:00
|
|
|
# Allow overriding the default memory allocator
|
|
|
|
# Mainly used for the musl builds, since the default musl malloc is very slow
|
2023-10-23 00:18:38 +02:00
|
|
|
mimalloc = { version = "0.1.39", features = ["secure"], default-features = false, optional = true }
|
|
|
|
which = "5.0.0"
|
2022-03-20 18:51:24 +01:00
|
|
|
|
2023-02-28 23:09:51 +01:00
|
|
|
# Argon2 library with support for the PHC format
|
2023-10-23 00:18:38 +02:00
|
|
|
argon2 = "0.5.2"
|
2023-02-28 23:09:51 +01:00
|
|
|
|
|
|
|
# Reading a password from the cli for generating the Argon2id ADMIN_TOKEN
|
2023-11-15 10:41:14 +01:00
|
|
|
rpassword = "7.3.1"
|
2023-03-30 17:18:59 +02:00
|
|
|
|
2023-10-23 00:18:38 +02:00
|
|
|
|
2022-02-22 20:48:00 +01:00
|
|
|
# Strip debuginfo from the release builds
|
2023-12-04 20:26:11 +01:00
|
|
|
# The symbols are the provide better panic traces
|
|
|
|
# Also enable fat LTO and use 1 codegen unit for optimizations
|
2022-02-22 20:48:00 +01:00
|
|
|
[profile.release]
|
|
|
|
strip = "debuginfo"
|
2023-12-04 20:26:11 +01:00
|
|
|
lto = "fat"
|
|
|
|
codegen-units = 1
|
2023-02-28 23:09:51 +01:00
|
|
|
|
2023-03-04 19:18:38 +01:00
|
|
|
|
|
|
|
# A little bit of a speedup
|
|
|
|
[profile.dev]
|
|
|
|
split-debuginfo = "unpacked"
|
2023-10-23 00:18:38 +02:00
|
|
|
|
|
|
|
# Always build argon2 using opt-level 3
|
|
|
|
# This is a huge speed improvement during testing
|
|
|
|
[profile.dev.package.argon2]
|
|
|
|
opt-level = 3
|