Re: Proposal: Role Sandboxing for Secure Impersonation

From: Wolfgang Walther <walther(at)technowledgy(dot)de>
To: Michał Kłeczek <michal(at)kleczek(dot)org>, Eric Hanson <eric(at)aquameta(dot)com>
Cc: PostgreSQL Hackers <pgsql-hackers(at)postgresql(dot)org>
Subject: Re: Proposal: Role Sandboxing for Secure Impersonation
Date: 2024-12-05 08:36:37
Message-ID: 70a84686-097b-42ef-9331-cff2ae4e6c05@technowledgy.de
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-hackers

Michał Kłeczek:
> PostgREST does not know alice's password as it performs JWT based
> authentication.

Yes, that's why I proposed an extension to support JWTs in the next
sentence. Then PostgREST would not need to do any auth at all anymore.

Best,

Wolfgang

In response to

Browse pgsql-hackers by date

  From Date Subject
Next Message Wolfgang Walther 2024-12-05 08:47:16 Re: Proposal: Role Sandboxing for Secure Impersonation
Previous Message Michael Paquier 2024-12-05 08:13:13 Re: shared-memory based stats collector - v70