Re: [PoC] Federated Authn/z with OAUTHBEARER

From: Jacob Champion <jacob(dot)champion(at)enterprisedb(dot)com>
To: Andres Freund <andres(at)anarazel(dot)de>
Cc: Daniel Gustafsson <daniel(at)yesql(dot)se>, Peter Eisentraut <peter(at)eisentraut(dot)org>, Antonin Houska <ah(at)cybertec(dot)at>, PostgreSQL Hackers <pgsql-hackers(at)postgresql(dot)org>
Subject: Re: [PoC] Federated Authn/z with OAUTHBEARER
Date: 2025-02-25 17:22:40
Message-ID: CAOYmi+mhqahb65y1zXtv60T9=mDYTaepV9b-wq-GHey00zuGOg@mail.gmail.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-hackers

On Mon, Feb 24, 2025 at 2:02 PM Jacob Champion
<jacob(dot)champion(at)enterprisedb(dot)com> wrote:
> Fair enough. I'll work on a patch to disallow it; best case, no one
> ever complains, and we've pruned an entire configuration from the list
> of things to worry about.

Here goes:

- 0001 fails configuration if the AsynchDNS feature is not built into libcurl.
- 0002 removes EINTR references from the validator documentation and
instead points authors towards our internal Wait APIs.
- 0003 is an optional followup to the const changes from upthread:
there's no need to memcpy() now, and anyone reading the code without
the history might wonder why I chose such a convoluted way to copy a
struct. :D

WDYT?

--Jacob

Attachment Content-Type Size
0002-oauth-Improve-validator-docs-on-interruptibility.patch application/octet-stream 1.9 KB
0001-oauth-Disallow-synchronous-DNS-in-libcurl.patch application/octet-stream 4.5 KB
0003-oauth-Simplify-copy-of-PGoauthBearerRequest.patch application/octet-stream 992 bytes

In response to

Browse pgsql-hackers by date

  From Date Subject
Next Message Alex Friedman 2025-02-25 17:24:14 A small correction to doc and comment of FSM for indexes
Previous Message jian he 2025-02-25 17:09:29 bug in stored generated column over domain with constraints.