Re: [PoC] Federated Authn/z with OAUTHBEARER

From: Jacob Champion <jacob(dot)champion(at)enterprisedb(dot)com>
To: Daniel Gustafsson <daniel(at)yesql(dot)se>
Cc: PostgreSQL Hackers <pgsql-hackers(at)postgresql(dot)org>, Shlok Kyal <shlok(dot)kyal(dot)oss(at)gmail(dot)com>, mahendrakar s <mahendrakarforpg(at)gmail(dot)com>, Andrey Chudnovsky <achudnovskij(at)gmail(dot)com>, Thomas Munro <thomas(dot)munro(at)gmail(dot)com>, "hlinnaka(at)iki(dot)fi" <hlinnaka(at)iki(dot)fi>, "michael(at)paquier(dot)xyz" <michael(at)paquier(dot)xyz>, "smilingsamay(at)gmail(dot)com" <smilingsamay(at)gmail(dot)com>, Stephen Frost <sfrost(at)snowman(dot)net>, Andrew Dunstan <andrew(at)dunslane(dot)net>
Subject: Re: [PoC] Federated Authn/z with OAUTHBEARER
Date: 2024-07-03 17:02:01
Message-ID: CAOYmi+k7UJcWJK1eoV4vpQQA-8ENKbjnQqxh_ewdq9JV-3yAqA@mail.gmail.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-hackers

On Mon, Apr 1, 2024 at 3:07 PM Jacob Champion
<jacob(dot)champion(at)enterprisedb(dot)com> wrote:
>
> Awesome, thank you! I will start adding coverage to the new code paths.

This patchset rotted more than I thought it would with the new
incremental JSON, and I got stuck in rebase hell. Rather than chip
away at that while the cfbot is red, here's a rebase of v22 to get the
CI up again, and I will port what I've been working on over that. (So,
for prior reviewers: recent upthread and offline feedback is not yet
incorporated, sorry, come back later.)

The big change in v23 is that I've removed fe_memutils.c from
libpgcommon_shlib completely, to try to reduce my own hair-pulling
when it comes to keeping exit() out of libpq. (It snuck in several
ways with incremental JSON.)

As far as I can tell, removing fe_memutils causes only one problem,
which is that Informix ECPG is relying on pnstrdup(). And I think that
may be a bug in itself? There's code in deccvasc() right after the
pnstrdup() call that takes care of a failed allocation, but the
frontend pnstrdup() is going to call exit() on failure. So my 0001
patch reverts that change, which was made in 0b9466fce. If that can go
in, and I'm not missing something that makes that call okay, maybe
0002 can be peeled off as well.

Thanks,
--Jacob

Attachment Content-Type Size
since-v22.diff.txt text/plain 38.0 KB
v23-0002-Remove-fe_memutils-from-libpgcommon_shlib.patch application/octet-stream 1.4 KB
v23-0003-common-jsonapi-support-libpq-as-a-client.patch application/octet-stream 33.0 KB
v23-0005-backend-add-OAUTHBEARER-SASL-mechanism.patch application/octet-stream 54.7 KB
v23-0004-libpq-add-OAUTHBEARER-SASL-mechanism.patch application/octet-stream 106.3 KB
v23-0006-Review-comments.patch application/octet-stream 32.6 KB
v23-0001-Revert-ECPG-s-use-of-pnstrdup.patch application/octet-stream 1.8 KB

In response to

Browse pgsql-hackers by date

  From Date Subject
Next Message Robert Haas 2024-07-03 17:07:11 Re: Assertion failure with summarize_wal enabled during pg_createsubscriber
Previous Message Andrey M. Borodin 2024-07-03 16:51:23 Re: Commitfest manager for July 2024