From 1fa379fe4a3d3dec9b988a1c3273d13cbfef38b4 Mon Sep 17 00:00:00 2001
From: xfy <i@rua.plus>
Date: Thu, 11 Jun 2026 09:42:08 +0800
Subject: [PATCH] chore: add sha2 and hex dependencies for session token
 hashing

---
 Cargo.lock | 8 ++++++++
 Cargo.toml | 2 ++
 2 files changed, 10 insertions(+)

diff --git a/Cargo.lock b/Cargo.lock
index 6093d7f..5eedc83 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -2039,6 +2039,12 @@ version = "0.5.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "fc0fef456e4baa96da950455cd02c081ca953b141298e41db3fc7e36b1da849c"
 
+[[package]]
+name = "hex"
+version = "0.4.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7f24254aa9a54b5c858eaee2f5bccdb46aaf0e486a595ed5fd8f86ba55232a70"
+
 [[package]]
 name = "hmac"
 version = "0.13.0"
@@ -5348,6 +5354,7 @@ dependencies = [
  "dotenvy",
  "getrandom 0.2.17",
  "governor",
+ "hex",
  "http",
  "image",
  "js-sys",
@@ -5357,6 +5364,7 @@ dependencies = [
  "regex",
  "serde",
  "serde_json",
+ "sha2 0.10.9",
  "syntect",
  "tokio",
  "tokio-postgres",
diff --git a/Cargo.toml b/Cargo.toml
index 1ab3980..59d81cd 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -23,6 +23,8 @@ getrandom = { version = "0.2", features = ["js"] }
 http = "1"
 axum = { version = "0.8", optional = true, features = ["multipart"] }
 serde_json = "1.0"
+sha2 = "0.10"
+hex = "0.4"
 ammonia = { version = "4", optional = true }
 syntect = { version = "5", default-features = false, features = ["default-syntaxes", "default-themes", "default-fancy", "html", "parsing", "dump-load", "yaml-load"], optional = true }
 # NOTE: WebP decoder is intentionally excluded from the image crate.