git: 0f705e7b4cc1 - main - security/rauthy: lightweight OpenID Connect, OAuth 2, and PAM Identity Provider written in Rust

From: Bernhard Froehlich <decke_at_FreeBSD.org>
Date: Thu, 24 Sep 2026 14:28:26 UTC
The branch main has been updated by decke:

URL: https://cgit.FreeBSD.org/ports/commit/?id=0f705e7b4cc19535d4954685c66e1f27e4b09519

commit 0f705e7b4cc19535d4954685c66e1f27e4b09519
Author:     Daniel Morante <daniel@morante.net>
AuthorDate: 2026-09-24 14:26:49 +0000
Commit:     Bernhard Froehlich <decke@FreeBSD.org>
CommitDate: 2026-09-24 14:26:49 +0000

    security/rauthy: lightweight OpenID Connect, OAuth 2, and PAM Identity Provider written in Rust
    
    PR:             295889
---
 GIDs                                     |    2 +-
 UIDs                                     |    2 +-
 security/Makefile                        |    1 +
 security/rauthy/Makefile                 |   52 +
 security/rauthy/Makefile.crates          |  799 +++++++++++++++
 security/rauthy/distinfo                 | 1601 ++++++++++++++++++++++++++++++
 security/rauthy/files/rauthy.in          |   39 +
 security/rauthy/files/rauthy.toml.sample |   75 ++
 security/rauthy/pkg-descr                |   21 +
 9 files changed, 2590 insertions(+), 2 deletions(-)

diff --git a/GIDs b/GIDs
index 46d54ae0cdea..cff0cfd1207d 100644
--- a/GIDs
+++ b/GIDs
@@ -787,7 +787,7 @@ tcpcryptd:*:841:
 munin:*:842:
 dahdi:*:843:asterisk
 subsonic:*:844:
-# free: 845
+rauthy:*:845:
 sogod:*:846:
 domoticz:*:847:
 graylog:*:848:
diff --git a/UIDs b/UIDs
index f90be9f67438..3453960c31e5 100644
--- a/UIDs
+++ b/UIDs
@@ -792,7 +792,7 @@ tcpcryptd:*:841:841::0:0:tcpcrypt daemon:/nonexistent:/usr/sbin/nologin
 munin:*:842:842::0:0:Munin:/var/munin:/usr/sbin/nologin
 # free: 843
 subsonic:*:844:844::0:0:Subsonic standalone-server:/nonexistent:/usr/sbin/nologin
-# free: 845
+rauthy:*:845:845::0:0:Rauthy IdP Daemon:/var/db/rauthy:/usr/sbin/nologin
 sogod:*:846:846::0:0:SOGo groupware:/nonexistent:/usr/sbin/nologin
 domoticz:*:847:847::0:0:domoticz user:/nonexistent:/usr/sbin/nologin
 graylog:*:848:848::0:0:Graylog user:/nonexistent:/usr/sbin/nologin
diff --git a/security/Makefile b/security/Makefile
index cd24006e14ba..89d55faf07f4 100644
--- a/security/Makefile
+++ b/security/Makefile
@@ -1152,6 +1152,7 @@
     SUBDIR += ratify
     SUBDIR += ratproxy
     SUBDIR += rats
+    SUBDIR += rauthy
     SUBDIR += rbw
     SUBDIR += rcracki_mt
     SUBDIR += rekor
diff --git a/security/rauthy/Makefile b/security/rauthy/Makefile
new file mode 100644
index 000000000000..579526a7e9ec
--- /dev/null
+++ b/security/rauthy/Makefile
@@ -0,0 +1,52 @@
+PORTNAME=	rauthy
+DISTVERSIONPREFIX=	v
+DISTVERSION=	0.35.2
+CATEGORIES=	security
+
+MAINTAINER=	daniel@morante.net
+COMMENT=	OpenID Connect Identity & Access Management server
+WWW=		https://sebadob.github.io/rauthy/
+
+LICENSE=	APACHE20
+LICENSE_FILE=	${WRKSRC}/LICENSE
+
+BUILD_DEPENDS=	bindgen:devel/rust-bindgen-cli
+LIB_DEPENDS=	libzstd.so:archivers/zstd
+
+USES=		cargo gmake ssl
+USE_GITHUB=	yes
+GH_ACCOUNT=	sebadob
+USE_RC_SUBR=	rauthy
+
+CARGO_INSTALL_PATH=	src/bin
+CARGO_ENV+=	OPENSSL_NO_VENDOR=1
+
+SUB_FILES=	rauthy
+SUB_LIST=	USER=${USERS} \
+		GROUP=${GROUPS} \
+		ETCDIR=${ETCDIR}
+
+USERS=		rauthy
+GROUPS=		rauthy
+
+PLIST_DIRS=	${ETCDIR} \
+		${EXAMPLESDIR}
+PLIST_FILES=	bin/rauthy \
+		"@sample ${ETCDIR}/rauthy.toml.sample" \
+		${EXAMPLESDIR}/config.toml
+
+post-extract:
+	@${MKDIR} ${WRKSRC}/static
+	@cd ${WRKSRC} && ${TAR} -xf assets/static_html/static_v1.tar.gz
+	@cd ${WRKSRC} && ${TAR} -xf assets/static_html/templates_html.tar.gz
+
+post-install:
+	${MKDIR} ${STAGEDIR}${ETCDIR}
+	${INSTALL_DATA} ${FILESDIR}/rauthy.toml.sample \
+		${STAGEDIR}${ETCDIR}/rauthy.toml.sample
+	${MKDIR} ${STAGEDIR}${EXAMPLESDIR}
+	${INSTALL_DATA} ${WRKSRC}/config.toml \
+		${STAGEDIR}${EXAMPLESDIR}/config.toml
+
+.include "${.CURDIR}/Makefile.crates"
+.include <bsd.port.mk>
diff --git a/security/rauthy/Makefile.crates b/security/rauthy/Makefile.crates
new file mode 100644
index 000000000000..8f42f490e251
--- /dev/null
+++ b/security/rauthy/Makefile.crates
@@ -0,0 +1,799 @@
+CARGO_CRATES=	accept-language-3.1.0 \
+		actix-codec-0.5.2 \
+		actix-http-3.12.1 \
+		actix-macros-0.2.4 \
+		actix-multipart-0.7.2 \
+		actix-multipart-derive-0.7.0 \
+		actix-router-0.5.4 \
+		actix-rt-2.11.0 \
+		actix-server-2.6.0 \
+		actix-service-2.0.3 \
+		actix-tls-3.5.0 \
+		actix-utils-3.0.1 \
+		actix-web-4.13.0 \
+		actix-web-codegen-4.3.0 \
+		actix-web-lab-0.26.0 \
+		actix-web-lab-derive-0.26.0 \
+		actix-web-prom-0.10.0 \
+		adler2-2.0.1 \
+		adler32-1.2.0 \
+		aead-0.5.2 \
+		ahash-0.7.8 \
+		ahash-0.8.12 \
+		aho-corasick-1.1.4 \
+		alloc-no-stdlib-2.0.4 \
+		alloc-stdlib-0.2.2 \
+		allocator-api2-0.2.21 \
+		ammonia-4.1.2 \
+		android_system_properties-0.1.5 \
+		anstream-1.0.0 \
+		anstyle-1.0.14 \
+		anstyle-parse-1.0.0 \
+		anstyle-query-1.1.5 \
+		anstyle-wincon-3.0.11 \
+		anyerror-0.1.13 \
+		anyhow-1.0.102 \
+		arbitrary-1.4.2 \
+		arc-swap-1.9.1 \
+		argon2-0.5.3 \
+		arrayvec-0.7.6 \
+		as_variant-1.3.0 \
+		askama-0.16.0 \
+		askama_derive-0.16.0 \
+		askama_macros-0.16.0 \
+		askama_parser-0.16.0 \
+		asn1-rs-0.6.2 \
+		asn1-rs-0.7.2 \
+		asn1-rs-derive-0.5.1 \
+		asn1-rs-derive-0.6.0 \
+		asn1-rs-impl-0.2.0 \
+		assign-1.1.1 \
+		async-compression-0.4.42 \
+		async-lock-3.4.2 \
+		async-stream-0.3.6 \
+		async-stream-impl-0.3.6 \
+		async-trait-0.1.89 \
+		atomic-waker-1.1.2 \
+		atrium-api-0.25.8 \
+		atrium-common-0.1.4 \
+		atrium-identity-0.1.9 \
+		atrium-oauth-0.1.7 \
+		atrium-xrpc-0.12.4 \
+		autocfg-1.5.0 \
+		aws-lc-rs-1.17.0 \
+		aws-lc-sys-0.39.1 \
+		aws-lc-sys-0.41.0 \
+		axum-0.8.9 \
+		axum-core-0.5.6 \
+		axum-extra-0.12.6 \
+		axum-server-0.8.0 \
+		base-x-0.2.11 \
+		base16ct-0.2.0 \
+		base256emoji-1.0.2 \
+		base64-0.21.7 \
+		base64-0.22.1 \
+		base64ct-1.8.3 \
+		base64urlsafedata-0.5.5 \
+		basic-toml-0.1.10 \
+		bincode-2.0.1 \
+		bincode_derive-2.0.1 \
+		bit-vec-0.9.1 \
+		bitflags-2.11.1 \
+		bitvec-1.0.1 \
+		blake2-0.10.6 \
+		block-buffer-0.10.4 \
+		block-buffer-0.12.0 \
+		borsh-1.6.1 \
+		borsh-derive-1.6.1 \
+		brotli-8.0.2 \
+		brotli-decompressor-5.0.0 \
+		bumpalo-3.20.2 \
+		byte-unit-5.2.0 \
+		bytecheck-0.6.12 \
+		bytecheck_derive-0.6.12 \
+		bytemuck-1.25.0 \
+		byteorder-1.5.0 \
+		byteorder-lite-0.1.0 \
+		bytes-1.11.1 \
+		bytestring-1.5.1 \
+		cast-0.3.0 \
+		cc-1.2.62 \
+		cesu8-1.1.0 \
+		cfg-if-1.0.4 \
+		cfg_aliases-0.2.1 \
+		chacha20-0.9.1 \
+		chacha20-0.10.0 \
+		chacha20poly1305-0.10.1 \
+		chrono-0.4.44 \
+		chrono-tz-0.10.4 \
+		cid-0.11.3 \
+		cidr-0.3.2 \
+		cipher-0.4.4 \
+		clap-4.6.1 \
+		clap_builder-4.6.0 \
+		clap_derive-4.6.1 \
+		clap_lex-1.1.0 \
+		cmake-0.1.58 \
+		cmov-0.5.3 \
+		colorchoice-1.0.5 \
+		colored-3.1.1 \
+		combine-4.6.7 \
+		compression-codecs-0.4.38 \
+		compression-core-0.4.32 \
+		concurrent-queue-2.5.0 \
+		console_error_panic_hook-0.1.7 \
+		const-oid-0.9.6 \
+		const-oid-0.10.2 \
+		const-str-0.4.3 \
+		const_panic-0.2.15 \
+		constant_time_eq-0.5.0 \
+		convert_case-0.4.0 \
+		convert_case-0.10.0 \
+		cookie-0.16.2 \
+		cookie-0.18.1 \
+		core-foundation-0.9.4 \
+		core-foundation-0.10.1 \
+		core-foundation-sys-0.8.7 \
+		cpufeatures-0.2.17 \
+		cpufeatures-0.3.0 \
+		crc-3.4.0 \
+		crc-catalog-2.5.0 \
+		crc32fast-1.5.0 \
+		critical-section-1.2.0 \
+		cron-0.16.0 \
+		crossbeam-channel-0.5.15 \
+		crossbeam-epoch-0.9.18 \
+		crossbeam-utils-0.8.21 \
+		crunchy-0.2.4 \
+		crypto-bigint-0.5.5 \
+		crypto-common-0.1.7 \
+		crypto-common-0.2.1 \
+		cryptr-0.10.0 \
+		css-color-0.2.8 \
+		cssparser-0.35.0 \
+		cssparser-macros-0.6.1 \
+		csv-1.4.0 \
+		csv-core-0.1.13 \
+		ct-codecs-1.1.6 \
+		ctutils-0.4.2 \
+		darling-0.20.11 \
+		darling_core-0.20.11 \
+		darling_macro-0.20.11 \
+		dary_heap-0.3.9 \
+		dashmap-6.2.1 \
+		data-encoding-2.11.0 \
+		data-encoding-macro-0.1.20 \
+		data-encoding-macro-internal-0.1.18 \
+		data-url-0.3.2 \
+		date_header-1.0.5 \
+		deadpool-0.12.3 \
+		deadpool-0.13.0 \
+		deadpool-postgres-0.14.1 \
+		deadpool-runtime-0.1.4 \
+		deadpool-runtime-0.3.1 \
+		der-0.7.10 \
+		der-0.8.0 \
+		der-parser-9.0.0 \
+		der-parser-10.0.0 \
+		der_derive-0.7.3 \
+		deranged-0.5.8 \
+		derive_arbitrary-1.4.2 \
+		derive_more-0.99.20 \
+		derive_more-1.0.0 \
+		derive_more-2.1.1 \
+		derive_more-impl-1.0.0 \
+		derive_more-impl-2.1.1 \
+		diff-0.1.13 \
+		digest-0.10.7 \
+		digest-0.11.3 \
+		displaydoc-0.2.5 \
+		dotenvy-0.15.7 \
+		dtoa-1.0.11 \
+		dtoa-short-0.3.5 \
+		dunce-1.0.5 \
+		dyn-clone-1.0.20 \
+		ecdsa-0.16.9 \
+		ed25519-3.0.0 \
+		ed25519-compact-2.3.0 \
+		either-1.15.0 \
+		elliptic-curve-0.13.8 \
+		email-encoding-0.4.1 \
+		email_address-0.2.9 \
+		encoding_rs-0.8.35 \
+		equivalent-1.0.2 \
+		errno-0.3.14 \
+		event-listener-5.4.1 \
+		event-listener-strategy-0.5.4 \
+		fallible-iterator-0.2.0 \
+		fallible-iterator-0.3.0 \
+		fallible-streaming-iterator-0.1.9 \
+		fastbloom-0.14.1 \
+		fastrand-2.4.1 \
+		fastwebsockets-0.10.0 \
+		fdeflate-0.3.7 \
+		ff-0.13.1 \
+		filetime-0.2.29 \
+		find-msvc-tools-0.1.9 \
+		flagset-0.4.7 \
+		flate2-1.1.9 \
+		flume-0.12.0 \
+		fnv-1.0.7 \
+		foldhash-0.1.5 \
+		foldhash-0.2.0 \
+		foreign-types-0.3.2 \
+		foreign-types-shared-0.1.1 \
+		form_urlencoded-1.2.2 \
+		fs-err-3.3.0 \
+		fs4-0.13.1 \
+		fs_extra-1.3.0 \
+		fsevent-sys-4.1.0 \
+		funty-2.0.0 \
+		futf-0.1.5 \
+		futures-0.3.32 \
+		futures-channel-0.3.32 \
+		futures-core-0.3.32 \
+		futures-executor-0.3.32 \
+		futures-io-0.3.32 \
+		futures-macro-0.3.32 \
+		futures-sink-0.3.32 \
+		futures-task-0.3.32 \
+		futures-timer-3.0.3 \
+		futures-util-0.3.32 \
+		generic-array-0.14.7 \
+		gethostname-1.1.0 \
+		getopts-0.2.24 \
+		getrandom-0.2.17 \
+		getrandom-0.3.4 \
+		getrandom-0.4.2 \
+		glob-0.3.3 \
+		group-0.13.0 \
+		h2-0.3.27 \
+		h2-0.4.14 \
+		half-2.7.1 \
+		hashbrown-0.12.3 \
+		hashbrown-0.14.5 \
+		hashbrown-0.15.5 \
+		hashbrown-0.16.1 \
+		hashbrown-0.17.1 \
+		hashlink-0.11.0 \
+		heck-0.5.0 \
+		hermit-abi-0.5.2 \
+		hex-0.4.3 \
+		hickory-net-0.26.1 \
+		hickory-proto-0.26.1 \
+		hickory-resolver-0.26.1 \
+		hiqlite-0.13.1 \
+		hiqlite-derive-0.13.0 \
+		hiqlite-wal-0.13.0 \
+		hmac-0.12.1 \
+		hmac-0.13.0 \
+		hmac-sha256-1.1.14 \
+		hmac-sha512-1.1.12 \
+		hostname-0.4.2 \
+		html5ever-0.35.0 \
+		http-0.2.12 \
+		http-1.4.0 \
+		http-body-1.0.1 \
+		http-body-util-0.1.3 \
+		httparse-1.10.1 \
+		httpdate-1.0.3 \
+		hybrid-array-0.4.12 \
+		hyper-1.9.0 \
+		hyper-rustls-0.27.9 \
+		hyper-tls-0.6.0 \
+		hyper-util-0.1.20 \
+		iana-time-zone-0.1.65 \
+		iana-time-zone-haiku-0.1.2 \
+		icu_collections-2.2.0 \
+		icu_locale_core-2.2.0 \
+		icu_normalizer-2.2.0 \
+		icu_normalizer_data-2.2.0 \
+		icu_properties-2.2.0 \
+		icu_properties_data-2.2.0 \
+		icu_provider-2.2.0 \
+		id-arena-2.3.0 \
+		ident_case-1.0.1 \
+		idna-1.1.0 \
+		idna_adapter-1.2.2 \
+		image-0.25.10 \
+		image-webp-0.2.4 \
+		impl-more-0.1.9 \
+		impl-more-0.3.1 \
+		indexmap-2.14.0 \
+		inotify-0.11.1 \
+		inotify-sys-0.1.5 \
+		inout-0.1.4 \
+		inventory-0.3.24 \
+		ipconfig-0.3.4 \
+		ipld-core-0.4.3 \
+		ipnet-2.12.0 \
+		ipnetwork-0.21.1 \
+		is_terminal_polyfill-1.70.2 \
+		itertools-0.14.0 \
+		itoa-1.0.18 \
+		jni-0.21.1 \
+		jni-0.22.4 \
+		jni-macros-0.22.4 \
+		jni-sys-0.3.1 \
+		jni-sys-0.4.1 \
+		jni-sys-macros-0.4.1 \
+		jobserver-0.1.34 \
+		jose-b64-0.1.2 \
+		jose-jwa-0.1.2 \
+		jose-jwk-0.1.2 \
+		josekit-0.8.7 \
+		js-sys-0.3.98 \
+		js_int-0.2.2 \
+		js_option-0.2.0 \
+		konst-0.4.3 \
+		kqueue-1.1.1 \
+		kqueue-sys-1.1.2 \
+		langtag-0.3.4 \
+		language-tags-0.3.2 \
+		lazy_static-1.5.0 \
+		leb128fmt-0.1.0 \
+		lettre-0.11.22 \
+		libc-0.2.186 \
+		libflate-2.3.0 \
+		libflate_lz77-2.3.0 \
+		libm-0.2.16 \
+		libredox-0.1.16 \
+		libsqlite3-sys-0.37.0 \
+		linux-raw-sys-0.12.1 \
+		litemap-0.8.2 \
+		local-channel-0.1.5 \
+		local-waker-0.1.4 \
+		lock_api-0.4.14 \
+		log-0.4.29 \
+		lru-0.16.4 \
+		lru-slab-0.1.2 \
+		lz4-sys-1.11.1+lz4-1.10.0 \
+		mac-0.1.1 \
+		maplit-1.0.2 \
+		markup5ever-0.35.0 \
+		match-lookup-0.1.2 \
+		match_token-0.35.0 \
+		matchers-0.2.0 \
+		matchit-0.8.4 \
+		maxminddb-0.28.1 \
+		md-5-0.11.0 \
+		md5-0.8.0 \
+		memchr-2.8.0 \
+		memmap2-0.9.10 \
+		mime-0.3.17 \
+		mime_guess-2.0.5 \
+		minicov-0.3.8 \
+		minimal-lexical-0.2.1 \
+		miniz_oxide-0.8.9 \
+		mio-1.2.0 \
+		moka-0.12.15 \
+		moxcms-0.8.1 \
+		multibase-0.9.2 \
+		multihash-0.19.5 \
+		native-tls-0.2.18 \
+		ndk-context-0.1.1 \
+		new_debug_unreachable-1.0.6 \
+		no_std_io2-0.9.4 \
+		nom-7.1.3 \
+		nom-8.0.0 \
+		notify-8.2.0 \
+		notify-types-2.1.0 \
+		nu-ansi-term-0.50.3 \
+		num-bigint-0.4.6 \
+		num-bigint-dig-0.8.6 \
+		num-conv-0.2.2 \
+		num-integer-0.1.46 \
+		num-iter-0.1.45 \
+		num-traits-0.2.19 \
+		num_cpus-1.17.0 \
+		num_threads-0.1.7 \
+		objc2-core-foundation-0.3.2 \
+		objc2-system-configuration-0.3.2 \
+		oid-registry-0.7.1 \
+		oid-registry-0.8.1 \
+		once_cell-1.21.4 \
+		once_cell_polyfill-1.70.2 \
+		oorandom-11.1.5 \
+		opaque-debug-0.3.1 \
+		openraft-0.9.24 \
+		openraft-macros-0.9.24 \
+		openssl-0.10.80 \
+		openssl-macros-0.1.1 \
+		openssl-probe-0.2.1 \
+		openssl-src-300.6.0+3.6.2 \
+		openssl-sys-0.9.116 \
+		oxilangtag-0.1.5 \
+		oxiri-0.2.11 \
+		p256-0.13.2 \
+		parking-2.2.1 \
+		parking_lot-0.12.5 \
+		parking_lot_core-0.9.12 \
+		parse-size-1.1.0 \
+		password-hash-0.5.0 \
+		pastey-0.1.1 \
+		pem-3.0.6 \
+		pem-rfc7468-0.7.0 \
+		percent-encoding-2.3.2 \
+		phf-0.11.3 \
+		phf-0.12.1 \
+		phf-0.13.1 \
+		phf_codegen-0.11.3 \
+		phf_generator-0.11.3 \
+		phf_macros-0.11.3 \
+		phf_shared-0.11.3 \
+		phf_shared-0.12.1 \
+		phf_shared-0.13.1 \
+		pin-project-1.1.13 \
+		pin-project-internal-1.1.13 \
+		pin-project-lite-0.2.17 \
+		pkcs1-0.7.5 \
+		pkcs8-0.10.2 \
+		pkcs8-0.11.0 \
+		pkg-config-0.3.33 \
+		png-0.18.1 \
+		poly1305-0.8.0 \
+		portable-atomic-1.13.1 \
+		postgres-derive-0.4.8 \
+		postgres-native-tls-0.5.3 \
+		postgres-protocol-0.6.11 \
+		postgres-types-0.2.13 \
+		potential_utf-0.1.5 \
+		powerfmt-0.2.0 \
+		ppv-lite86-0.2.21 \
+		precomputed-hash-0.1.1 \
+		prefix-trie-0.8.4 \
+		pretty_assertions-1.4.1 \
+		prettyplease-0.2.37 \
+		primeorder-0.13.6 \
+		proc-macro-crate-3.5.0 \
+		proc-macro-error-attr2-2.0.0 \
+		proc-macro-error2-2.0.1 \
+		proc-macro2-1.0.106 \
+		prometheus-0.14.0 \
+		protobuf-3.7.2 \
+		protobuf-support-3.7.2 \
+		ptr_meta-0.1.4 \
+		ptr_meta_derive-0.1.4 \
+		pulldown-cmark-0.13.3 \
+		pulldown-cmark-escape-0.11.0 \
+		pxfm-0.1.29 \
+		quick-error-2.0.1 \
+		quick-xml-0.39.4 \
+		quinn-0.11.9 \
+		quinn-proto-0.11.14 \
+		quinn-udp-0.5.14 \
+		quote-1.0.45 \
+		quoted_printable-0.5.2 \
+		r-efi-5.3.0 \
+		r-efi-6.0.0 \
+		radium-0.7.0 \
+		rand-0.8.6 \
+		rand-0.9.4 \
+		rand-0.10.1 \
+		rand_chacha-0.3.1 \
+		rand_chacha-0.9.0 \
+		rand_core-0.6.4 \
+		rand_core-0.9.5 \
+		rand_core-0.10.1 \
+		rcgen-0.14.8 \
+		redox_syscall-0.5.18 \
+		ref-cast-1.0.25 \
+		ref-cast-impl-1.0.25 \
+		refinery-0.9.1 \
+		refinery-core-0.9.1 \
+		refinery-macros-0.9.1 \
+		regex-1.12.3 \
+		regex-automata-0.4.14 \
+		regex-lite-0.1.9 \
+		regex-syntax-0.8.10 \
+		relative-path-1.9.3 \
+		rend-0.4.2 \
+		reqwest-0.12.28 \
+		reqwest-0.13.3 \
+		resolv-conf-0.7.6 \
+		rfc6979-0.4.0 \
+		ring-0.17.14 \
+		rio_api-0.8.6 \
+		rio_turtle-0.8.6 \
+		rkyv-0.7.46 \
+		rkyv_derive-0.7.46 \
+		rle-decode-fast-1.0.3 \
+		rpassword-7.5.2 \
+		rsa-0.9.10 \
+		rsqlite-vfs-0.1.0 \
+		rstest-0.26.1 \
+		rstest_macros-0.26.1 \
+		rtoolbox-0.0.5 \
+		ruma-0.15.1 \
+		ruma-client-0.18.0 \
+		ruma-client-api-0.23.1 \
+		ruma-common-0.18.0 \
+		ruma-events-0.33.0 \
+		ruma-identifiers-validation-0.12.1 \
+		ruma-macros-0.18.0 \
+		rusqlite-0.39.0 \
+		rust-embed-8.11.0 \
+		rust-embed-impl-8.11.0 \
+		rust-embed-utils-8.11.0 \
+		rust_decimal-1.42.0 \
+		rustc-hash-2.1.2 \
+		rustc_version-0.4.1 \
+		rusticata-macros-4.1.0 \
+		rustix-1.1.4 \
+		rustls-0.23.40 \
+		rustls-native-certs-0.8.3 \
+		rustls-pki-types-1.14.1 \
+		rustls-platform-verifier-0.6.2 \
+		rustls-platform-verifier-0.7.0 \
+		rustls-platform-verifier-android-0.1.1 \
+		rustls-webpki-0.103.13 \
+		rustversion-1.0.22 \
+		ryu-1.0.23 \
+		s3-simple-0.8.0 \
+		same-file-1.0.6 \
+		schannel-0.1.29 \
+		schemars-1.2.1 \
+		scopeguard-1.2.0 \
+		seahash-4.1.0 \
+		sec1-0.7.3 \
+		security-framework-3.7.0 \
+		security-framework-sys-2.17.0 \
+		semver-1.0.28 \
+		serde-1.0.228 \
+		serde_bytes-0.11.19 \
+		serde_cbor_2-0.13.0 \
+		serde_core-1.0.228 \
+		serde_derive-1.0.228 \
+		serde_html_form-0.2.8 \
+		serde_html_form-0.4.0 \
+		serde_json-1.0.149 \
+		serde_json_path-0.7.2 \
+		serde_json_path_core-0.2.2 \
+		serde_json_path_macros-0.1.6 \
+		serde_json_path_macros_internal-0.1.2 \
+		serde_path_to_error-0.1.20 \
+		serde_plain-1.0.2 \
+		serde_rusqlite-0.42.0 \
+		serde_spanned-0.6.9 \
+		serde_spanned-1.1.1 \
+		serde_urlencoded-0.7.1 \
+		sha1-0.10.6 \
+		sha1-0.11.0 \
+		sha2-0.10.9 \
+		sha2-0.11.0 \
+		sharded-slab-0.1.7 \
+		shlex-1.3.0 \
+		signal-hook-registry-1.4.8 \
+		signature-2.2.0 \
+		signature-3.0.0 \
+		simd-adler32-0.3.9 \
+		simd_cesu8-1.1.1 \
+		simdutf8-0.1.5 \
+		siphasher-1.0.3 \
+		slab-0.4.12 \
+		smallvec-1.15.1 \
+		socket2-0.5.10 \
+		socket2-0.6.3 \
+		spin-0.9.8 \
+		spki-0.7.3 \
+		spki-0.8.0 \
+		spow-0.6.0 \
+		sqlite-wasm-rs-0.5.3 \
+		stable_deref_trait-1.2.1 \
+		strfmt-0.2.5 \
+		string_cache-0.8.9 \
+		string_cache_codegen-0.5.4 \
+		stringprep-0.1.5 \
+		strsim-0.11.1 \
+		strum-0.28.0 \
+		strum_macros-0.28.0 \
+		subtle-2.6.1 \
+		svg-hush-0.9.6 \
+		syn-1.0.109 \
+		syn-2.0.117 \
+		sync_wrapper-1.0.2 \
+		synstructure-0.13.2 \
+		system-configuration-0.7.0 \
+		system-configuration-sys-0.6.0 \
+		tagptr-0.2.0 \
+		tap-1.0.1 \
+		tar-0.4.46 \
+		tempfile-3.27.0 \
+		tendril-0.4.3 \
+		thiserror-1.0.69 \
+		thiserror-2.0.18 \
+		thiserror-impl-1.0.69 \
+		thiserror-impl-2.0.18 \
+		thread-priority-3.0.0 \
+		thread_local-1.1.9 \
+		tikv-jemalloc-sys-0.6.1+5.3.0-1-ge13ca993e8ccb9ba9847cc330696e02839f328f7 \
+		tikv-jemallocator-0.6.1 \
+		time-0.3.47 \
+		time-core-0.1.8 \
+		time-macros-0.2.27 \
+		tinystr-0.8.3 \
+		tinyvec-1.11.0 \
+		tinyvec_macros-0.1.1 \
+		tls-hot-reload-0.3.0 \
+		tls_codec-0.4.2 \
+		tls_codec_derive-0.4.2 \
+		tokio-1.52.3 \
+		tokio-macros-2.7.0 \
+		tokio-native-tls-0.3.1 \
+		tokio-postgres-0.7.17 \
+		tokio-postgres-rustls-0.13.0 \
+		tokio-rustls-0.26.4 \
+		tokio-stream-0.1.18 \
+		tokio-test-0.4.5 \
+		tokio-util-0.7.18 \
+		toml-0.8.23 \
+		toml-1.1.2+spec-1.1.0 \
+		toml_datetime-0.6.11 \
+		toml_datetime-1.1.1+spec-1.1.0 \
+		toml_edit-0.22.27 \
+		toml_edit-0.25.11+spec-1.1.0 \
+		toml_parser-1.1.2+spec-1.1.0 \
+		toml_write-0.1.2 \
+		toml_writer-1.1.1+spec-1.1.0 \
+		tower-0.5.3 \
+		tower-http-0.6.11 \
+		tower-layer-0.3.3 \
+		tower-service-0.3.3 \
+		tracing-0.1.44 \
+		tracing-attributes-0.1.31 \
+		tracing-core-0.1.36 \
+		tracing-futures-0.2.5 \
+		tracing-log-0.2.0 \
+		tracing-serde-0.2.0 \
+		tracing-subscriber-0.3.23 \
+		trait-variant-0.1.2 \
+		try-lock-0.2.5 \
+		typenum-1.20.0 \
+		typewit-1.15.2 \
+		unicase-2.9.0 \
+		unicode-bidi-0.3.18 \
+		unicode-ident-1.0.24 \
+		unicode-normalization-0.1.25 \
+		unicode-properties-0.1.4 \
+		unicode-segmentation-1.13.2 \
+		unicode-width-0.2.2 \
+		unicode-xid-0.2.6 \
+		universal-hash-0.5.1 \
+		unsigned-varint-0.8.0 \
+		untrusted-0.7.1 \
+		untrusted-0.9.0 \
+		unty-0.0.4 \
+		url-2.5.8 \
+		utf-8-0.7.6 \
+		utf8-width-0.1.8 \
+		utf8_iter-1.0.4 \
+		utf8parse-0.2.2 \
+		utoipa-5.5.0 \
+		utoipa-gen-5.5.0 \
+		utoipa-swagger-ui-9.0.2 \
+		utoipa-swagger-ui-vendored-0.1.2 \
+		uuid-1.23.1 \
+		validator-0.20.0 \
+		validator_derive-0.20.0 \
+		validit-0.2.5 \
+		valuable-0.1.1 \
+		vcpkg-0.2.15 \
+		version_check-0.9.5 \
+		virtue-0.0.18 \
+		walkdir-2.5.0 \
+		want-0.3.1 \
+		wasi-0.11.1+wasi-snapshot-preview1 \
+		wasi-0.14.7+wasi-0.2.4 \
+		wasip2-1.0.3+wasi-0.2.9 \
+		wasip3-0.4.0+wasi-0.3.0-rc-2026-01-06 \
+		wasite-1.0.2 \
+		wasm-bindgen-0.2.121 \
+		wasm-bindgen-futures-0.4.71 \
+		wasm-bindgen-macro-0.2.121 \
+		wasm-bindgen-macro-support-0.2.121 \
+		wasm-bindgen-shared-0.2.121 \
+		wasm-bindgen-test-0.3.71 \
+		wasm-bindgen-test-macro-0.3.71 \
+		wasm-bindgen-test-shared-0.2.121 \
+		wasm-encoder-0.244.0 \
+		wasm-metadata-0.244.0 \
+		wasm-streams-0.5.0 \
+		wasmparser-0.244.0 \
+		web-sys-0.3.98 \
+		web-time-1.1.0 \
+		web_atoms-0.1.3 \
+		webauthn-attestation-ca-0.5.5 \
+		webauthn-rs-0.5.5 \
+		webauthn-rs-core-0.5.5 \
+		webauthn-rs-proto-0.5.5 \
+		webpki-root-certs-1.0.7 \
+		webpki-roots-1.0.7 \
+		whoami-2.1.2 \
+		widestring-1.2.1 \
+		wildmatch-2.6.1 \
+		winapi-util-0.1.11 \
+		windows-0.61.3 \
+		windows-collections-0.2.0 \
+		windows-core-0.61.2 \
+		windows-core-0.62.2 \
+		windows-future-0.2.1 \
+		windows-implement-0.60.2 \
+		windows-interface-0.59.3 \
+		windows-link-0.1.3 \
+		windows-link-0.2.1 \
+		windows-numerics-0.2.0 \
+		windows-registry-0.6.1 \
+		windows-result-0.3.4 \
+		windows-result-0.4.1 \
+		windows-strings-0.4.2 \
+		windows-strings-0.5.1 \
+		windows-sys-0.45.0 \
+		windows-sys-0.52.0 \
+		windows-sys-0.59.0 \
+		windows-sys-0.60.2 \
+		windows-sys-0.61.2 \
+		windows-targets-0.42.2 \
+		windows-targets-0.52.6 \
+		windows-targets-0.53.5 \
+		windows-threading-0.1.0 \
+		windows_aarch64_gnullvm-0.42.2 \
+		windows_aarch64_gnullvm-0.52.6 \
+		windows_aarch64_gnullvm-0.53.1 \
+		windows_aarch64_msvc-0.42.2 \
+		windows_aarch64_msvc-0.52.6 \
+		windows_aarch64_msvc-0.53.1 \
+		windows_i686_gnu-0.42.2 \
+		windows_i686_gnu-0.52.6 \
+		windows_i686_gnu-0.53.1 \
+		windows_i686_gnullvm-0.52.6 \
+		windows_i686_gnullvm-0.53.1 \
+		windows_i686_msvc-0.42.2 \
+		windows_i686_msvc-0.52.6 \
+		windows_i686_msvc-0.53.1 \
+		windows_x86_64_gnu-0.42.2 \
+		windows_x86_64_gnu-0.52.6 \
+		windows_x86_64_gnu-0.53.1 \
+		windows_x86_64_gnullvm-0.42.2 \
+		windows_x86_64_gnullvm-0.52.6 \
+		windows_x86_64_gnullvm-0.53.1 \
+		windows_x86_64_msvc-0.42.2 \
+		windows_x86_64_msvc-0.52.6 \
+		windows_x86_64_msvc-0.53.1 \
+		winnow-0.7.15 \
+		winnow-1.0.3 \
+		wit-bindgen-0.51.0 \
+		wit-bindgen-0.57.1 \
+		wit-bindgen-core-0.51.0 \
+		wit-bindgen-rust-0.51.0 \
+		wit-bindgen-rust-macro-0.51.0 \
+		wit-component-0.244.0 \
+		wit-parser-0.244.0 \
+		writeable-0.6.3 \
+		wyz-0.5.1 \
+		x509-cert-0.2.5 \
+		x509-parser-0.16.0 \
+		x509-parser-0.18.1 \
+		xattr-1.6.1 \
+		xml-1.3.0 \
+		yansi-1.0.1 \
+		yasna-0.6.0 \
+		yoke-0.8.2 \
+		yoke-derive-0.8.2 \
+		zerocopy-0.8.48 \
+		zerocopy-derive-0.8.48 \
+		zerofrom-0.1.8 \
+		zerofrom-derive-0.1.7 \
+		zeroize-1.8.2 \
+		zeroize_derive-1.4.3 \
+		zerotrie-0.2.4 \
+		zerovec-0.11.6 \
+		zerovec-derive-0.11.3 \
+		zip-3.0.0 \
+		zlib-rs-0.6.3 \
+		zmij-1.0.21 \
+		zopfli-0.8.3 \
+		zstd-0.13.3 \
+		zstd-safe-7.2.4 \
+		zstd-sys-2.0.16+zstd.1.5.7 \
+		zune-core-0.5.1 \
+		zune-jpeg-0.5.15
diff --git a/security/rauthy/distinfo b/security/rauthy/distinfo
new file mode 100644
index 000000000000..11df26eeb22a
--- /dev/null
+++ b/security/rauthy/distinfo
@@ -0,0 +1,1601 @@
+TIMESTAMP = 1780635194
+SHA256 (rust/crates/accept-language-3.1.0.crate) = 8f27d075294830fcab6f66e320dab524bc6d048f4a151698e153205559113772
+SIZE (rust/crates/accept-language-3.1.0.crate) = 9269
+SHA256 (rust/crates/actix-codec-0.5.2.crate) = 5f7b0a21988c1bf877cf4759ef5ddaac04c1c9fe808c9142ecb78ba97d97a28a
+SIZE (rust/crates/actix-codec-0.5.2.crate) = 14085
+SHA256 (rust/crates/actix-http-3.12.1.crate) = 93acb4a42f64936f9b8cae4a433b237599dd6eb6ed06124eb67132ef8cc90662
+SIZE (rust/crates/actix-http-3.12.1.crate) = 172208
+SHA256 (rust/crates/actix-macros-0.2.4.crate) = e01ed3140b2f8d422c68afa1ed2e85d996ea619c988ac834d255db32138655cb
+SIZE (rust/crates/actix-macros-0.2.4.crate) = 8380
+SHA256 (rust/crates/actix-multipart-0.7.2.crate) = d5118a26dee7e34e894f7e85aa0ee5080ae4c18bf03c0e30d49a80e418f00a53
+SIZE (rust/crates/actix-multipart-0.7.2.crate) = 44611
+SHA256 (rust/crates/actix-multipart-derive-0.7.0.crate) = e11eb847f49a700678ea2fa73daeb3208061afa2b9d1a8527c03390f4c4a1c6b
+SIZE (rust/crates/actix-multipart-derive-0.7.0.crate) = 9530
+SHA256 (rust/crates/actix-router-0.5.4.crate) = 14f8c75c51892f18d9c46150c5ac7beb81c95f78c8b83a634d49f4ca32551fe7
+SIZE (rust/crates/actix-router-0.5.4.crate) = 40683
+SHA256 (rust/crates/actix-rt-2.11.0.crate) = 92589714878ca59a7626ea19734f0e07a6a875197eec751bb5d3f99e64998c63
+SIZE (rust/crates/actix-rt-2.11.0.crate) = 22288
+SHA256 (rust/crates/actix-server-2.6.0.crate) = a65064ea4a457eaf07f2fba30b4c695bf43b721790e9530d26cb6f9019ff7502
+SIZE (rust/crates/actix-server-2.6.0.crate) = 42816
+SHA256 (rust/crates/actix-service-2.0.3.crate) = 9e46f36bf0e5af44bdc4bdb36fbbd421aa98c79a9bce724e1edeb3894e10dc7f
+SIZE (rust/crates/actix-service-2.0.3.crate) = 28409
+SHA256 (rust/crates/actix-tls-3.5.0.crate) = 6176099de3f58fbddac916a7f8c6db297e021d706e7a6b99947785fee14abe9f
+SIZE (rust/crates/actix-tls-3.5.0.crate) = 49393
+SHA256 (rust/crates/actix-utils-3.0.1.crate) = 88a1dcdff1466e3c2488e1cb5c36a71822750ad43839937f85d2f4d9f8b705d8
+SIZE (rust/crates/actix-utils-3.0.1.crate) = 10096
+SHA256 (rust/crates/actix-web-4.13.0.crate) = ff87453bc3b56e9b2b23c1cc0b1be8797184accf51d2abe0f8a33ec275d316bf
+SIZE (rust/crates/actix-web-4.13.0.crate) = 268857
+SHA256 (rust/crates/actix-web-codegen-4.3.0.crate) = f591380e2e68490b5dfaf1dd1aa0ebe78d84ba7067078512b4ea6e4492d622b8
+SIZE (rust/crates/actix-web-codegen-4.3.0.crate) = 20382
+SHA256 (rust/crates/actix-web-lab-0.26.0.crate) = 1a89606b86fd2f8c0ddd72ef0be171e58c919ee0b6914aa7b52354063e5ee361
+SIZE (rust/crates/actix-web-lab-0.26.0.crate) = 145383
+SHA256 (rust/crates/actix-web-lab-derive-0.26.0.crate) = 2ac4d6e04e97fe707286509b4f338e99c5fb7249c770e1da074af5e27faa96b3
+SIZE (rust/crates/actix-web-lab-derive-0.26.0.crate) = 4373
+SHA256 (rust/crates/actix-web-prom-0.10.0.crate) = a7eb266b4c692a4a7e68429fcbe4eb3bd55c053f6d84c0522dc83df22395edf6
+SIZE (rust/crates/actix-web-prom-0.10.0.crate) = 21449
+SHA256 (rust/crates/adler2-2.0.1.crate) = 320119579fcad9c21884f5c4861d16174d0e06250625266f50fe6898340abefa
+SIZE (rust/crates/adler2-2.0.1.crate) = 13366
+SHA256 (rust/crates/adler32-1.2.0.crate) = aae1277d39aeec15cb388266ecc24b11c80469deae6067e17a1a7aa9e5c1f234
+SIZE (rust/crates/adler32-1.2.0.crate) = 6411
+SHA256 (rust/crates/aead-0.5.2.crate) = d122413f284cf2d62fb1b7db97e02edb8cda96d769b16e443a4f6195e35662b0
+SIZE (rust/crates/aead-0.5.2.crate) = 15509
+SHA256 (rust/crates/ahash-0.7.8.crate) = 891477e0c6a8957309ee5c45a6368af3ae14bb510732d2684ffa19af310920f9
+SIZE (rust/crates/ahash-0.7.8.crate) = 38550
+SHA256 (rust/crates/ahash-0.8.12.crate) = 5a15f179cd60c4584b8a8c596927aadc462e27f2ca70c04e0071964a73ba7a75
+SIZE (rust/crates/ahash-0.8.12.crate) = 43413
+SHA256 (rust/crates/aho-corasick-1.1.4.crate) = ddd31a130427c27518df266943a5308ed92d4b226cc639f5a8f1002816174301
+SIZE (rust/crates/aho-corasick-1.1.4.crate) = 184015
+SHA256 (rust/crates/alloc-no-stdlib-2.0.4.crate) = cc7bb162ec39d46ab1ca8c77bf72e890535becd1751bb45f64c597edb4c8c6b3
+SIZE (rust/crates/alloc-no-stdlib-2.0.4.crate) = 10105
+SHA256 (rust/crates/alloc-stdlib-0.2.2.crate) = 94fb8275041c72129eb51b7d0322c29b8387a0386127718b096429201a5d6ece
+SIZE (rust/crates/alloc-stdlib-0.2.2.crate) = 6693
+SHA256 (rust/crates/allocator-api2-0.2.21.crate) = 683d7910e743518b0e34f1186f92494becacb047c7b6bf616c96772180fef923
+SIZE (rust/crates/allocator-api2-0.2.21.crate) = 63622
+SHA256 (rust/crates/ammonia-4.1.2.crate) = 17e913097e1a2124b46746c980134e8c954bc17a6a59bb3fde96f088d126dde6
*** 1700 LINES SKIPPED ***