mirror of
https://github.com/neondatabase/neon.git
synced 2025-12-22 21:59:59 +00:00
0dbe551802
## Problem We want to have the data-api served by the proxy directly instead of relying on a 3rd party to run a deployment for each project/endpoint. ## Summary of changes With the changes below, the proxy (auth-broker) becomes also a "rest-broker", that can be thought of as a "Multi-tenant" data-api which provides an automated REST api for all the databases in the region. The core of the implementation (that leverages the subzero library) is in proxy/src/serverless/rest.rs and this is the only place that has "new logic". --------- Co-authored-by: Ruslan Talpa <ruslan.talpa@databricks.com> Co-authored-by: Alexander Bayandin <alexander@neon.tech> Co-authored-by: Conrad Ludgate <conrad@neon.tech>
122 lines
3.3 KiB
TOML
122 lines
3.3 KiB
TOML
# This file was auto-generated using `cargo deny init`.
|
|
# cargo-deny is a cargo plugin that lets you lint your project's
|
|
# dependency graph to ensure all your dependencies conform
|
|
# to your expectations and requirements.
|
|
|
|
# Root options
|
|
[graph]
|
|
targets = [
|
|
{ triple = "x86_64-unknown-linux-gnu" },
|
|
{ triple = "aarch64-unknown-linux-gnu" },
|
|
{ triple = "aarch64-apple-darwin" },
|
|
{ triple = "x86_64-apple-darwin" },
|
|
]
|
|
all-features = false
|
|
no-default-features = false
|
|
[output]
|
|
feature-depth = 1
|
|
|
|
# This section is considered when running `cargo deny check advisories`
|
|
# More documentation for the advisories section can be found here:
|
|
# https://embarkstudios.github.io/cargo-deny/checks/advisories/cfg.html
|
|
[advisories]
|
|
db-urls = ["https://github.com/rustsec/advisory-db"]
|
|
yanked = "warn"
|
|
|
|
[[advisories.ignore]]
|
|
id = "RUSTSEC-2023-0071"
|
|
reason = "the marvin attack only affects private key decryption, not public key signature verification"
|
|
|
|
[[advisories.ignore]]
|
|
id = "RUSTSEC-2024-0436"
|
|
reason = "The paste crate is a build-only dependency with no runtime components. It is unlikely to have any security impact."
|
|
|
|
# This section is considered when running `cargo deny check licenses`
|
|
# More documentation for the licenses section can be found here:
|
|
# https://embarkstudios.github.io/cargo-deny/checks/licenses/cfg.html
|
|
[licenses]
|
|
version = 2
|
|
allow = [
|
|
"0BSD",
|
|
"Apache-2.0",
|
|
"BSD-2-Clause",
|
|
"BSD-3-Clause",
|
|
"CC0-1.0",
|
|
"CDDL-1.0",
|
|
"ISC",
|
|
"MIT",
|
|
"MPL-2.0",
|
|
"Unicode-3.0",
|
|
]
|
|
confidence-threshold = 0.8
|
|
exceptions = [
|
|
# Zlib license has some restrictions if we decide to change sth
|
|
{ allow = ["Zlib"], name = "const_format_proc_macros", version = "*" },
|
|
{ allow = ["Zlib"], name = "const_format", version = "*" },
|
|
]
|
|
|
|
[licenses.private]
|
|
ignore = true
|
|
registries = []
|
|
|
|
# This section is considered when running `cargo deny check bans`.
|
|
# More documentation about the 'bans' section can be found here:
|
|
# https://embarkstudios.github.io/cargo-deny/checks/bans/cfg.html
|
|
[bans]
|
|
multiple-versions = "allow"
|
|
wildcards = "allow"
|
|
highlight = "all"
|
|
workspace-default-features = "allow"
|
|
external-default-features = "allow"
|
|
allow = []
|
|
|
|
skip = []
|
|
skip-tree = []
|
|
|
|
[[bans.deny]]
|
|
# we use tokio, the same rationale applies for async-{io,waker,global-executor,executor,channel,lock}, smol
|
|
# if you find yourself here while adding a dependency, try "default-features = false", ask around on #rust
|
|
name = "async-std"
|
|
|
|
[[bans.deny]]
|
|
name = "async-io"
|
|
|
|
[[bans.deny]]
|
|
name = "async-waker"
|
|
|
|
[[bans.deny]]
|
|
name = "async-global-executor"
|
|
|
|
[[bans.deny]]
|
|
name = "async-executor"
|
|
|
|
[[bans.deny]]
|
|
name = "smol"
|
|
|
|
[[bans.deny]]
|
|
# We want to use rustls instead of the platform's native tls implementation.
|
|
name = "native-tls"
|
|
|
|
[[bans.deny]]
|
|
name = "openssl"
|
|
|
|
# This section is considered when running `cargo deny check sources`.
|
|
# More documentation about the 'sources' section can be found here:
|
|
# https://embarkstudios.github.io/cargo-deny/checks/sources/cfg.html
|
|
[sources]
|
|
unknown-registry = "warn"
|
|
unknown-git = "warn"
|
|
allow-registry = ["https://github.com/rust-lang/crates.io-index"]
|
|
allow-git = [
|
|
# Crate pinned to commit in origin repo due to opentelemetry version.
|
|
# TODO: Remove this once crate is fetched from crates.io again.
|
|
"https://github.com/mattiapenati/tower-otel",
|
|
]
|
|
|
|
[sources.allow-org]
|
|
github = [
|
|
"neondatabase",
|
|
]
|
|
gitlab = []
|
|
bitbucket = []
|