feat: split cose and jwt into independent default-on features

.github/workflows/ci.yml

@@ -10,20 +10,32 @@ env:
   CARGO_TERM_COLOR: always
 
 jobs:
-  build:
-
+  lint:
     runs-on: ubuntu-latest
-
     steps:
     - uses: actions/checkout@v5
     - name: Formatting checks
       run: cargo fmt --all -- --check
     - name: Clippy checks
       run: cargo clippy --all-targets -- -D clippy::all -D clippy::cargo  -A clippy::multiple-crate-versions
+
+  build:
+    runs-on: ubuntu-latest
+    strategy:
+      fail-fast: false
+      matrix:
+        features:
+          - ""                                 # default (cose + jwt)
+          - "--no-default-features --features cose"
+          - "--no-default-features --features jwt"
+          - "--no-default-features"
+          - "--all-features"
+    steps:
+    - uses: actions/checkout@v5
     - name: Build
-      run: cargo build --verbose
+      run: cargo build --verbose ${{ matrix.features }}
     - name: Run tests
-      run: cargo test --verbose
+      run: cargo test --verbose ${{ matrix.features }}
 
 # Recommended pipeline if using advisories, to avoid sudden breakages
 # From: https://github.com/EmbarkStudios/cargo-deny-action

Cargo.toml

@@ -9,15 +9,27 @@ license = "Apache-2.0"
 keywords = ["ear", "serde"]
 categories = ["data-structures", "encoding"]
 
+
+[package.metadata.docs.rs]
+features = ["cose", "jwt"]
+
+
 [dependencies]
 base64 = "0.22.1"
 ciborium = "0.2.0"
-cose-rust = "0.1.2"
+cose-rust = {version = "0.1.2", optional = true}
 hex = "0.4.3"
-jsonwebtoken = { version = "10", features = ["aws_lc_rs"] }
+jsonwebtoken = {version = "10", features = ["aws_lc_rs"], optional = true}
 lazy_static = "1.5.0"
-openssl = "0.10.54"
+openssl = {version = "0.10.54", optional = true}
 phf = {version = "0.13.1", features = ["macros", "serde"]}
 serde = {version = "1.0", features = ["derive"]}
 serde_json = {version = "1.0.93", features = ["raw_value"]}
 thiserror = "2.0.16"
+
+
+[features]
+default = ["cose", "jwt"]
+cose = ["dep:cose-rust", "dep:openssl", "dep:jsonwebtoken"]
+jwt = ["dep:jsonwebtoken"]
+

src/base64.rs

@@ -11,6 +11,7 @@ use serde::{
 use crate::error::Error;
 
 /// decodes bytes from a base64-encoded string
+#[cfg(feature = "cose")]
 pub fn decode_str(v: &str) -> Result<Vec<u8>, Error> {
     general_purpose::URL_SAFE_NO_PAD
         .decode(v)