huddle-server 2.0.4

Centralized E2E relay + offline mailbox for huddle, designed to run behind a Tor v3 onion service. Treats huddle's wire bytes as opaque ciphertext — it never decrypts.
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57

[package]
name = "huddle-server"
version.workspace = true
edition.workspace = true
description = "Centralized E2E relay + offline mailbox for huddle, designed to run behind a Tor v3 onion service. Treats huddle's wire bytes as opaque ciphertext — it never decrypts."
license.workspace = true
repository.workspace = true
homepage.workspace = true
readme = "README.md"
keywords = ["chat", "relay", "tor", "onion", "encryption"]
categories = ["network-programming", "command-line-utilities"]

[[bin]]
name = "huddle-server"
path = "src/main.rs"

[dependencies]
# huddle 2.0.4 (WS1.1): the relay shares the wire protocol + the fingerprint /
# relay-auth constructions with the client via the lean, runtime-free
# `huddle-protocol` crate (no libp2p / vodozemac / tokio in ITS graph),
# replacing the hand-duplicated copies the relay used to carry.
huddle-protocol = { workspace = true }
tokio = { version = "1", features = ["full"] }
tokio-tungstenite = "0.24"
futures-util = "0.3"
# Same rusqlite feature as huddle-core so Cargo's feature unification across
# the workspace stays consistent (SQLCipher-capable bundle).
rusqlite = { version = "0.39", features = ["bundled-sqlcipher-vendored-openssl"] }
serde = { version = "1", features = ["derive"] }
serde_json = "1"
tracing = "0.1"
tracing-subscriber = { version = "0.3", features = ["env-filter"] }
anyhow = "1"
# huddle 1.1.4 / 2.0.4: enforced client auth. The relay verifies the Ed25519
# signature directly (ed25519-dalek + base64) and constant-time-compares the
# `/metrics` bearer token (sha2); the fingerprint derivation and the
# `RELAY_AUTH_DOMAIN || nonce` message now come from `huddle-protocol`. `rand`
# supplies the nonce. Versions match huddle-core so Cargo's workspace feature
# unification holds.
ed25519-dalek = "2"
sha2 = "0.11"
base64 = "0.22"
rand = "0.8"

[dev-dependencies]
tokio = { version = "1", features = ["full"] }
tokio-tungstenite = "0.24"
futures-util = "0.3"
serde_json = "1"
# huddle 1.1.4: the raw-socket tests perform the auth handshake by hand
# (decode the challenge nonce, sign it via huddle-core's Identity, base64 the
# pubkey/signature into the Hello).
base64 = "0.22"
tempfile = "3"
# Exercise the real client connector (huddle_core::network::server) against
# the server binary, end to end.
huddle-core = { workspace = true }