diff --git a/attestation-service/Cargo.toml b/attestation-service/Cargo.toml
index 2ec08d4..baac4bb 100644
--- a/attestation-service/Cargo.toml
+++ b/attestation-service/Cargo.toml
@@ -34,10 +34,10 @@ csv-rs = { git = "https://gitee.com/anolis/csv-rs", rev = "05fbacd", optional =
 eventlog-rs = { version = "0.1.3", optional = true }
 futures = "0.3.17"
 hex = "0.4.3"
-sgx-dcap-quoteverify-rs = { git = "https://github.com/intel/SGXDataCenterAttestationPrimitives", tag = "DCAP_1.16", optional = true }
+jsonwebtoken = "8"
+jwt = { version = "0.16.0", features = ["openssl"]}
 # TODO: change it to "0.5", once released.
 kbs-types = { git = "https://github.com/virtee/kbs-types", rev = "c90df0e" }
-jwt = { version = "0.16.0", features = ["openssl"]}
 lazy_static = "1.4.0"
 log.workspace = true
 openssl = { version = "0.10.55", optional = true }
@@ -50,6 +50,7 @@ serde.workspace = true
 serde_json.workspace = true
 serde_variant = "0.1.2"
 sev = { version = "1.2.0", features = ["openssl", "snp"], optional = true }
+sgx-dcap-quoteverify-rs = { git = "https://github.com/intel/SGXDataCenterAttestationPrimitives", tag = "DCAP_1.16", optional = true }
 sha2.workspace = true
 shadow-rs.workspace = true
 sled = "0.34.7"
@@ -63,7 +64,6 @@ uuid = { version = "1.1.2", features = ["v4"] }
 veraison-apiclient = { git = "https://github.com/chendave/rust-apiclient", branch = "token", optional = true }
 ear = { git = "https://github.com/chendave/rust-ear", branch = "test" }
 x509-parser = { version = "0.14.0", optional = true }
-jsonwebtoken = "8"
 
 [build-dependencies]
 shadow-rs.workspace = true