- Add src/auth.rs with require_auth middleware extracting user_id from Bearer token - Wire auth middleware onto all /api/* routes - Replace CorsLayer::permissive() with env-driven FRONTEND_URL/ADMIN_URL origins - Pass real auth_user.user_id to confirm_action instead of conversation_id Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
25 lines
868 B
TOML
25 lines
868 B
TOML
[package]
|
|
name = "nxtgauge-ai-assistant"
|
|
version = "0.1.0"
|
|
edition = "2021"
|
|
|
|
[dependencies]
|
|
axum = { version = "0.7", features = ["macros"] }
|
|
tokio = { version = "1", features = ["macros", "rt-multi-thread"] }
|
|
serde = { version = "1", features = ["derive"] }
|
|
serde_json = "1"
|
|
thiserror = "1"
|
|
tracing = "0.1"
|
|
tracing-subscriber = { version = "0.3", features = ["env-filter", "fmt"] }
|
|
tower-http = { version = "0.5", features = ["cors", "trace"] }
|
|
reqwest = { version = "0.12", features = ["json", "rustls-tls"] }
|
|
async-trait = "0.1"
|
|
uuid = { version = "1", features = ["v4", "serde"] }
|
|
chrono = { version = "0.4", features = ["serde"] }
|
|
sqlx = { version = "0.8", default-features = false, features = ["runtime-tokio-rustls", "postgres", "chrono", "uuid", "migrate", "macros"] }
|
|
url = "2"
|
|
urlencoding = "2"
|
|
jsonwebtoken = "10"
|
|
|
|
[dev-dependencies]
|
|
http-body-util = "0.1"
|