Re: [PoC] Federated Authn/z with OAUTHBEARER

From: Jacob Champion <jacob(dot)champion(at)enterprisedb(dot)com>
To: Antonin Houska <ah(at)cybertec(dot)at>
Cc: Daniel Gustafsson <daniel(at)yesql(dot)se>, Peter Eisentraut <peter(at)eisentraut(dot)org>, PostgreSQL Hackers <pgsql-hackers(at)postgresql(dot)org>
Subject: Re: [PoC] Federated Authn/z with OAUTHBEARER
Date: 2024-10-25 18:22:07
Message-ID: CAOYmi+=xf76rSLy+eMVecgmyJwEnRp+iFXrbdo4z+p5McrxSBA@mail.gmail.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-hackers

On Wed, Oct 23, 2024 at 3:40 PM Jacob Champion
<jacob(dot)champion(at)enterprisedb(dot)com> wrote:
> > * Information on the new method should be added to pg_hba.conf.sample.method.
>
> Whoops, this will be fixed in v34.

...which is now attached. This should also fix the build failure for
the docs themselves.

I have combed almost all of Daniel's feedback backwards into the main
patch (just the new bzero code remains, with the open question
upthread), and I've made further edits to flesh out more of the
documentation. A diff is provided so you don't have to go looking for
the doc changes. Feedback on the wording and level of detail is very
welcome!

Next up is, hopefully, url-encoding. I hadn't realized what an
absolute mess that would be [1].

Thanks,
--Jacob

[1] https://github.com/oauth-wg/oauth-v2-1/issues/128#issuecomment-1879632883

Attachment Content-Type Size
since-v33.diff.txt text/plain 13.1 KB
v34-0001-Add-OAUTHBEARER-SASL-mechanism.patch application/octet-stream 211.0 KB
v34-0002-v30-review-comments.patch application/octet-stream 4.5 KB
v34-0003-DO-NOT-MERGE-Add-pytest-suite-for-OAuth.patch application/octet-stream 182.7 KB

In response to

Responses

Browse pgsql-hackers by date

  From Date Subject
Next Message Sergey Sargsyan 2024-10-25 18:32:55 Re: CREATE INDEX CONCURRENTLY on partitioned index
Previous Message Noah Misch 2024-10-25 18:17:01 Re: processes stuck in shutdown following OOM/recovery