Flask>=3.0,<4
requests>=2.31,<3
waitress>=3.0,<4
tomlkit>=0.13,<1      # comment/format-preserving TOML round-trip (admin panel writes config.toml)
Authlib>=1.3,<2       # Okta OIDC: discovery, PKCE, JWKS, id_token validation
