- Auth handlers: login/refresh/logout + user CRUD with tenant isolation - JWT middleware: Bearer token validation → TenantContext injection - RBAC helpers: require_permission, require_any_permission, require_role - AuthModule: implements ErpModule with public/protected route split - AuthState: FromRef pattern avoids circular deps between erp-auth and erp-server - Server: public routes (health+login+refresh) + protected routes (JWT middleware) - ErpModule trait: added as_any() for downcast support - Workspace: added async-trait, sha2 dependencies
29 lines
622 B
TOML
29 lines
622 B
TOML
[package]
|
|
name = "erp-server"
|
|
version.workspace = true
|
|
edition.workspace = true
|
|
|
|
[[bin]]
|
|
name = "erp-server"
|
|
path = "src/main.rs"
|
|
|
|
[dependencies]
|
|
erp-core.workspace = true
|
|
erp-common.workspace = true
|
|
tokio.workspace = true
|
|
axum.workspace = true
|
|
tower.workspace = true
|
|
tower-http.workspace = true
|
|
tracing.workspace = true
|
|
tracing-subscriber.workspace = true
|
|
config.workspace = true
|
|
sea-orm.workspace = true
|
|
redis.workspace = true
|
|
utoipa.workspace = true
|
|
serde_json.workspace = true
|
|
serde.workspace = true
|
|
erp-server-migration = { path = "migration" }
|
|
erp-auth.workspace = true
|
|
anyhow.workspace = true
|
|
uuid.workspace = true
|