flask>=3.0
flask-sqlalchemy>=3.1
flask-migrate>=4.0
flask-login>=0.6
flask-wtf>=1.2
flask-limiter>=3.5
flask-cors>=4.0
pymysql>=1.1
argon2-cffi>=23.1
pyjwt>=2.8
python-dotenv>=1.0
gunicorn>=21.0
pyotp>=2.9.0
qrcode[pil]>=7.4.2
cryptography>=42.0       # AES-256-GCM server-side TOTP secret encryption
redis>=5.0               # Shared rate-limit storage across Gunicorn workers
webauthn>=2.0            # Passkey / WebAuthn registration and authentication (py_webauthn)
APScheduler
