crates/nornir-auth-sshsig/Cargo.toml
[package]
name = "nornir-auth-sshsig"
version = "0.1.2"
edition = "2021"
authors = ["Ignalina ApS"]
description = "Per-call SSH-signature (SSHSIG) credentials for gRPC control planes, product-neutral: the credential a caller signs with its own OpenSSH key (method-bound, single-use, time-boxed), the one verifier, and the replay guard. Each product names its own metadata key, scheme token and sshsig namespace, so a credential for one product never verifies at another. Moved out of gunnar-grpc (its wire format unchanged) so monetize's control API checks callers the same way."
license = "MIT OR Apache-2.0"
repository = "https://git.gunnar.rs/nordisk/edda"
keywords = ["auth", "sshsig", "grpc", "ssh"]
categories = ["authentication"]
[lib]
name = "nornir_auth_sshsig"
[dependencies]
# The SSHSIG arithmetic and the OpenSSH key formats. The same crate and features
# gunnar-grpc already links, so moving the verifier here adds nothing to a graph.
ssh-key = { version = "0.7.0-rc.11", default-features = false, features = ["ed25519", "std", "rand_core"] }
# `from_metadata` reads a gRPC request's metadata; no transport.
tonic = { version = "0.14", default-features = false, optional = true }
[features]
default = ["tonic"]
tonic = ["dep:tonic"]
[dev-dependencies]
rand_core = { version = "0.6", features = ["getrandom"] }