Re: [PoC] Federated Authn/z with OAUTHBEARER

From: Jelte Fennema-Nio <postgres(at)jeltef(dot)nl>
To: Jacob Champion <jacob(dot)champion(at)enterprisedb(dot)com>
Cc: Peter Eisentraut <peter(at)eisentraut(dot)org>, Christoph Berg <myon(at)debian(dot)org>, Andres Freund <andres(at)anarazel(dot)de>, Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>, Bruce Momjian <bruce(at)momjian(dot)us>, PostgreSQL Hackers <pgsql-hackers(at)postgresql(dot)org>, Daniel Gustafsson <daniel(at)yesql(dot)se>, Thomas Munro <thomas(dot)munro(at)gmail(dot)com>, Nazir Bilal Yavuz <byavuz81(at)gmail(dot)com>, Antonin Houska <ah(at)cybertec(dot)at>, Wolfgang Walther <walther(at)technowledgy(dot)de>
Subject: Re: [PoC] Federated Authn/z with OAUTHBEARER
Date: 2025-04-09 08:38:47
Message-ID: CAGECzQSYZhX2AW2gn0dmOGfoUp18z1EMkVm1enxsfTxJFqJviQ@mail.gmail.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-hackers

On Wed, Apr 9, 2025, 10:58 Jacob Champion <jacob(dot)champion(at)enterprisedb(dot)com>
wrote:

> Is it acceptable/desirable for a build, which has not been configured
> --with-libcurl, to still pick up a compatible OAuth implementation
> installed by the distro? If so, we can go with a "bare" dlopen(). If
> that's not okay, I think we will probably need to use pkglibdir or
> some derivative, and introduce a way for tests (and users?) to
> override that directory selection. Unless someone has a good idea on
> how we can split the difference.
>

That seems like it could cause some confusing situations and also making
local testing of different compilation options difficult. How about
ifdef-ing away the dlopen call if --with-libcurl is not specified. So to
have oauth support you need to compile libpq with --with-libcurl AND the
libpq-oauth.so file needs to be present.

(resent because I failed to reply to all from my phone)

>

In response to

Browse pgsql-hackers by date

  From Date Subject
Next Message Laurenz Albe 2025-04-09 08:42:36 Re: [PATCH] New predefined role pg_manage_extensions
Previous Message jian he 2025-04-09 08:23:06 tab complete for COPY populated materialized view TO