chore: upgrade packages

TODO.md

@@ -62,3 +62,7 @@
 - [ ] implement docker secrets. https://docs.docker.com/engine/swarm/secrets/
 
 - [ ] Find a minimal OpenID client implementation like Listmonk but a little bit more mature
+
+- [x] Add `iat` field to id_token claims. Even though the iat field is not required in the spec,
+most OIDC client require its use for security reason, to not accept a token before a certain date.
+It make it clear that the token must not be retro-active.

lib/http_server/Cargo.toml

@@ -20,15 +20,16 @@ fully_pub = { workspace = true }
 tokio = { workspace = true }
 
 # Web
-axum = { version = "0.7.7", features = ["json", "multipart"] }
-axum-extra = { version = "0.9.4", features = ["cookie"] }
+axum = { version = "0.8.4", features = ["json", "multipart"] }
+axum-extra = { version = "0.10.0", features = ["cookie"] }
 axum-template = { version = "2.4.0", features = ["minijinja"] }
-axum_typed_multipart = "0.13.1"
-minijinja = { version = "2.1", features = ["builtins"] }
+axum_typed_multipart = "0.16.2"
 # to make work the static assets server
-tower-http = { version = "0.6.1", features = ["fs"] }
-
+tower-http = { version = "0.6.1", features = ["fs", "trace"] }
+# template engine
+minijinja = { version = "2.1", features = ["builtins"] }
 minijinja-embed = "2.3.1"
+
 axum-macros = "0.4.2"
 jsonwebtoken = "9.3.0"
 time = "0.3.36"
@@ -47,6 +48,9 @@ url = { workspace = true }
 # To work with key pair
 pem = "3.0.4"
 
+tracing = "0.1"
+tracing-subscriber = "0.3"
+
 [dependencies.jsonwebkey-convert-repaired]
 git = "https://forge.lefuturiste.fr/rust-libs/jsonwebkey-rs-repaired.git"
 branch = "master"

lib/http_server/src/router.rs

@@ -48,7 +48,7 @@ pub fn build_router(server_config: &ServerConfig, app_state: AppState) -> Router
         .route("/api/user", get(api::read_user::read_user_basic))
         .layer(middleware::from_fn_with_state(app_state.clone(), app_auth::enforce_jwt_auth_middleware))
         .route("/api", get(api::index::get_index))
-        .route("/api/user-assets/:asset_id", get(api::public_assets::get_user_asset));
+        .route("/api/user-assets/{asset_id}", get(api::public_assets::get_user_asset));
 
     let well_known_routes = Router::new()
         .route("/.well-known/openid-configuration", get(api::openid::well_known::get_well_known_openid_configuration))