sprint 5 final 7 15 updated

[EleisonC]

Updated Dependencies

• sqlx 0.8 → 0.8.6
• redis: 0.25.2 → 0.32.7

Updated Related ClickUp Tasks

Task 1 - Set up PostgreSQL

• (1.2.2) Add SQLx to auth-service/Cargo.toml

Task 2 - Implement PostgreSQL-backed user store

• (2.2.2) Implement a PostgreSQL user store i auth-service/src/services/data_stores/postgres_user_store.rs

Task 4 - Implement Redis-backed banned token store

• (4.1.2) Add Redis crate to auth-service/Cargo.toml

Breaking changes

• Use OsRng instead of rand::rng() for cryptographic salt generation in postgres_user_store

Notes

• Verification steps passed: cargo check, cargo test.

However, running cargo audit.
1 known vulnerability Marvin Attack: potential key recovery through timing sidechannels
in transitive dependency rsa 0.9.8 (RUSTSEC-2023-0071, Medium severity). No fixed version available; monitoring for upstream fix in jsonwebtoken.

• Local build and test suite confirmed working with updated dependencies
• ClickUp tasks updated to reflect dependency changes