Re: [PoC] Federated Authn/z with OAUTHBEARER

From: Jacob Champion <jacob(dot)champion(at)enterprisedb(dot)com>
To: PostgreSQL Hackers <pgsql-hackers(at)postgresql(dot)org>
Subject: Re: [PoC] Federated Authn/z with OAUTHBEARER
Date: 2024-02-28 14:05:52
Message-ID: CAOYmi+kioyDGk4-jNtOJU=bL6VEMeo4du3yv+=W9vqSHUFQ0CQ@mail.gmail.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-hackers

[Trying again, with all patches unzipped and the CC list temporarily
removed to avoid flooding people's inboxes. Original message follows.]

On Fri, Feb 23, 2024 at 5:01 PM Jacob Champion
<jacob(dot)champion(at)enterprisedb(dot)com> wrote:
> The
> patchset is now carrying a lot of squash-cruft, and I plan to flatten
> it in the next version.

This is done in v17, which is also now based on the two patches pulled
out by Daniel in [1]. Besides the squashes, which make up most of the
range-diff, I've fixed a call to strncasecmp() which is not available
on Windows.

Daniel and I discussed trying a Python version of the test server,
since the standard library there should give us more goodies to work
with. A proof of concept is in 0009. I think the big question I have
for it is, how would we communicate what we want the server to do for
the test? (We could perhaps switch on magic values of the client ID?)
In the end I'd like to be testing close to 100% of the failure modes,
and that's likely to mean a lot of back-and-forth if the server
implementation isn't in the Perl process.

--Jacob

[1] https://postgr.es/m/flat/F51F8777-FAF5-49F2-BC5E-8F9EB423ECE0%40yesql.se

Attachment Content-Type Size
since-v16.diff.txt text/plain 54.6 KB
v17-0003-Explicitly-require-password-for-SCRAM-exchange.patch application/octet-stream 2.9 KB
v17-0004-libpq-add-OAUTHBEARER-SASL-mechanism.patch application/octet-stream 118.7 KB
v17-0001-common-jsonapi-support-FRONTEND-clients.patch application/octet-stream 19.6 KB
v17-0002-Refactor-SASL-exchange-to-return-tri-state-statu.patch application/octet-stream 9.9 KB
v17-0006-Introduce-OAuth-validator-libraries.patch application/octet-stream 32.0 KB
v17-0007-Add-pytest-suite-for-OAuth.patch application/octet-stream 172.2 KB
v17-0008-XXX-temporary-patches-to-build-and-test.patch application/octet-stream 3.8 KB
v17-0005-backend-add-OAUTHBEARER-SASL-mechanism.patch application/octet-stream 39.8 KB
v17-0009-WIP-Python-OAuth-provider-implementation.patch application/octet-stream 9.7 KB

In response to

Responses

Browse pgsql-hackers by date

  From Date Subject
Next Message Melanie Plageman 2024-02-28 14:38:54 Re: BitmapHeapScan streaming read user and prelim refactoring
Previous Message Daniel Gustafsson 2024-02-28 13:46:11 Re: An improved README experience for PostgreSQL