authkestra-devsig 0.3.3

Device-bound signature authentication for the authkestra framework: per-request proof-of-possession signing plus an issuer-attested key binding, verifiable with no session store and no per-request network call
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32

[package]
exclude.workspace = true
name = "authkestra-devsig"
version.workspace = true
edition.workspace = true
description = "Device-bound signature authentication for the authkestra framework: per-request proof-of-possession signing plus an issuer-attested key binding, verifiable with no session store and no per-request network call"
repository.workspace = true
license.workspace = true
keywords.workspace = true
categories.workspace = true
readme = "README.md"

[dependencies]
async-trait = "0.1"
jsonwebtoken = { version = "11", features = ["rust_crypto"] }
serde = { version = "1.0", features = ["derive"] }
serde_json = "1.0"
thiserror = "2.0.18"
base64 = "0.22.1"
sha2 = "0.10"
subtle = "2.6"
tokio = { version = "1", features = ["sync", "time"] }
tracing = "0.1"

[dev-dependencies]
tokio = { version = "1", features = ["full"] }
rsa = "0.9"
p256 = { version = "0.13", features = ["pem", "ecdsa"] }
rand = "0.8"

[features]
default = []