diff --git a/.github/workflows/code_deployment.yml b/.github/workflows/code_deployment.yml index 2e45ff60..93d7a364 100644 --- a/.github/workflows/code_deployment.yml +++ b/.github/workflows/code_deployment.yml @@ -48,8 +48,9 @@ jobs: if: needs.release.outputs.part != 'patch' runs-on: ubuntu-24.04-arm permissions: - packages: write contents: read + packages: write + actions: write steps: - name: Checkout repository uses: actions/checkout@v6 @@ -91,7 +92,7 @@ jobs: ghcr.io/${{ github.repository }}/api:latest labels: ${{ steps.meta.outputs.labels }} cache-from: type=gha - cache-to: type=gha,mode=max + cache-to: type=gha,mode=min build-args: | VERSION=${{ needs.release.outputs.new_tag }} @@ -107,6 +108,6 @@ jobs: ghcr.io/${{ github.repository }}/app:latest labels: ${{ steps.meta.outputs.labels }} cache-from: type=gha - cache-to: type=gha,mode=max + cache-to: type=gha,mode=min build-args: | VERSION=${{ needs.release.outputs.new_tag }} diff --git a/README.md b/README.md index 7673916f..cfcbe9e6 100644 --- a/README.md +++ b/README.md @@ -1,11 +1,20 @@ # Secure authorization system -An authorization REST API server featuring RLS database queries, JWT cookies and RBAC. The client implementation includes server-side rendering and navigation guards. Made as a college project. +An authorization REST API server featuring RLS database queries, JWT cookies and RBAC. The client implementation includes server-side rendering and navigation guards. + +> [!NOTE] +> Developed as a college project to demonstrate cookie exchange and end-to-end security patterns in web apps. ## About ### Architecture +API - Rust, Axum, diesel + +APP - TypeScript, NuxtJS + +Database - CockroachDB Cluster + ![High Level Diagram](./.github/assets/high_level.svg) ![Flow Diagram](./.github/assets/flow.svg) @@ -62,4 +71,4 @@ TODO ## License -Look at [LICENSE]() +Look at [LICENSE](./LICENSE)