name: halkyon_oidc_server
description: >-
  Signing in with OpenID Connect for Serverpod, as a module: any provider
  that follows OpenID Connect's code flow, SimpleLogin a preset. Keeps only
  the provider's ID of a person; the ID token checked against the provider's
  keys, the nonce and the attempt the device holds.
version: 0.1.0
# In the Halkyon repository until it runs on learn.halkyon.eu (ADR 0023, D3).
publish_to: none

environment:
  sdk: ^3.13.0

resolution: workspace

dependencies:
  clock: ^1.1.3
  # The PKCE challenge's SHA-256.
  crypto: ^3.0.7
  # Checks ID tokens' signatures (ADR 0020, D12). Pinned exactly, as what checks
  # who someone is must never move by accident; the version Serverpod's own
  # sign-ins resolve to (^3.1.0).
  dart_jsonwebtoken: 3.4.1
  # The providers' discovery documents, keys and token endpoints.
  http: ^1.6.0
  meta: ^1.16.0
  serverpod: 4.0.4
  serverpod_auth_idp_server: 4.0.4

dev_dependencies:
  # Makes the RSA keys the tests sign their providers' tokens with.
  pointycastle: ^4.0.0
  serverpod_test: 4.0.4
  test: ^1.25.5