Re: pgsql: Add support for OAUTHBEARER SASL mechanism

From: Jacob Champion <jacob(dot)champion(at)enterprisedb(dot)com>
To: Christoph Berg <myon(at)debian(dot)org>
Cc: Daniel Gustafsson <dgustafsson(at)postgresql(dot)org>, Thomas Munro <thomas(dot)munro(at)gmail(dot)com>, pgsql-hackers(at)lists(dot)postgresql(dot)org
Subject: Re: pgsql: Add support for OAUTHBEARER SASL mechanism
Date: 2025-03-31 23:09:22
Message-ID: CAOYmi+=SEwJ+7ATgxrkvDFyGb-FQ5FN9eF_RVMic6DAU3bk5zw@mail.gmail.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-committers pgsql-hackers

On Mon, Mar 31, 2025 at 2:54 PM Christoph Berg <myon(at)debian(dot)org> wrote:
>
> > Add support for OAUTHBEARER SASL mechanism
>
> Debian still has this experimental port with a GNU userland and a
> FreeBSD kernel called kfreebsd. I don't expect anyone to particularly
> care about it, but it found an actual bug:
>
> /build/reproducible-path/postgresql-18-18~~devel.20250331/build/../src/interfaces/libpq/fe-auth-oauth-curl.c: In function ‘register_socket’:
> /build/reproducible-path/postgresql-18-18~~devel.20250331/build/../src/interfaces/libpq/fe-auth-oauth-curl.c:1317:20: error: ‘actx’ undeclared (first use in this function); did you mean ‘ctx’?
> 1317 | actx_error(actx, "libpq does not support multiplexer sockets on this platform");
> | ^~~~
>
> This should not be a compile-time error; actx is not defined outside
> the #ifdef blocks there:

Ah, sorry about that. Thank you for reporting it!

(That means that Windows builds --with-libcurl are similarly broken, I
think. Not that Windows packagers will want to use --with-libcurl --
it doesn't do anything -- but it should build.)

I don't have hurd-amd64 to test, but I'm working on a patch that will
build and pass tests if I manually munge pg_config.h. We were skipping
the useless tests via a $windows_os check; I think I should use
check_pg_config() instead.

We could change how this works a bit for the proposed libpq-oauth.so
plugin, and only build it if we have a workable implementation. I do
like having these other platforms compile the Curl code, though, since
we'd prefer to keep the build clean for a future Windows
implementation...

--Jacob

In response to

Responses

Browse pgsql-committers by date

  From Date Subject
Next Message Jacob Champion 2025-04-01 00:06:16 Re: pgsql: Add support for OAUTHBEARER SASL mechanism
Previous Message Christoph Berg 2025-03-31 22:17:31 Re: pgsql: Add support for OAUTHBEARER SASL mechanism

Browse pgsql-hackers by date

  From Date Subject
Next Message Masahiko Sawada 2025-03-31 23:09:57 Re: tzdata 2025b
Previous Message Tom Lane 2025-03-31 22:46:37 Re: tzdata 2025b