azcomputerguru
65086f4407
CORS: - Restrict CORS to DASHBOARD_URL environment variable - Default to production dashboard domain Authentication: - Add AuthUser requirement to all agent management endpoints - Add AuthUser requirement to all command endpoints - Add AuthUser requirement to all metrics endpoints - Add audit logging for command execution (user_id tracked) Agent Security: - Replace Unicode characters with ASCII markers [OK]/[ERROR]/[WARNING] - Add certificate pinning for update downloads (allowlist domains) - Fix insecure temp file creation (use /var/run/gururmm with 0700 perms) - Fix rollback script backgrounding (use setsid instead of literal &) Dashboard Security: - Move token storage from localStorage to sessionStorage - Add proper TypeScript types (remove 'any' from error handlers) - Centralize token management functions Legacy Agent: - Add -AllowInsecureTLS parameter (opt-in required) - Add Windows Event Log audit trail when insecure mode used - Update documentation with security warnings Closes: Phase 1 items in issue #1 Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
77 lines
1.5 KiB
TOML
77 lines
1.5 KiB
TOML
[package]
|
|
name = "gururmm-server"
|
|
version = "0.2.0"
|
|
edition = "2021"
|
|
description = "GuruRMM Server - RMM management server"
|
|
authors = ["GuruRMM"]
|
|
|
|
[dependencies]
|
|
# Web framework
|
|
axum = { version = "0.7", features = ["ws", "macros"] }
|
|
axum-extra = { version = "0.9", features = ["typed-header"] }
|
|
tower = { version = "0.5", features = ["util", "timeout"] }
|
|
tower-http = { version = "0.6", features = ["cors", "trace", "compression-gzip"] }
|
|
http = "1"
|
|
|
|
# Async runtime
|
|
tokio = { version = "1", features = ["full"] }
|
|
|
|
# Database
|
|
sqlx = { version = "0.8", features = [
|
|
"runtime-tokio",
|
|
"tls-native-tls",
|
|
"postgres",
|
|
"uuid",
|
|
"chrono",
|
|
"migrate"
|
|
] }
|
|
|
|
# Serialization
|
|
serde = { version = "1", features = ["derive"] }
|
|
serde_json = "1"
|
|
|
|
# Configuration
|
|
config = "0.14"
|
|
|
|
# Authentication
|
|
jsonwebtoken = "9"
|
|
argon2 = "0.5"
|
|
|
|
# UUID
|
|
uuid = { version = "1", features = ["v4", "serde"] }
|
|
|
|
# Time
|
|
chrono = { version = "0.4", features = ["serde"] }
|
|
|
|
# Logging
|
|
tracing = "0.1"
|
|
tracing-subscriber = { version = "0.3", features = ["env-filter"] }
|
|
|
|
# Error handling
|
|
anyhow = "1"
|
|
thiserror = "1"
|
|
|
|
# Random for API key generation
|
|
rand = "0.8"
|
|
base64 = "0.22"
|
|
|
|
# Hashing for API keys
|
|
sha2 = "0.10"
|
|
|
|
# Semantic versioning for agent updates
|
|
semver = "1"
|
|
|
|
# Environment variables
|
|
dotenvy = "0.15"
|
|
|
|
# Futures for WebSocket
|
|
futures-util = "0.3"
|
|
|
|
# Pin transitive dependencies to stable versions
|
|
home = "0.5.9" # 0.5.12 requires Rust 1.88
|
|
|
|
[profile.release]
|
|
opt-level = 3
|
|
lto = true
|
|
codegen-units = 1
|