Re: [PoC] Federated Authn/z with OAUTHBEARER

From: Jacob Champion <pchampion(at)vmware(dot)com>
To: "pgsql-hackers(at)postgresql(dot)org" <pgsql-hackers(at)postgresql(dot)org>
Cc: "hlinnaka(at)iki(dot)fi" <hlinnaka(at)iki(dot)fi>, "michael(at)paquier(dot)xyz" <michael(at)paquier(dot)xyz>, "smilingsamay(at)gmail(dot)com" <smilingsamay(at)gmail(dot)com>
Subject: Re: [PoC] Federated Authn/z with OAUTHBEARER
Date: 2022-03-04 19:13:42
Message-ID: 0e86fe7e3534fb05db02379fed404a2010eb1d62.camel@vmware.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-hackers

Hi all,

v3 rebases this patchset over the top of Samay's pluggable auth
provider API [1], included here as patches 0001-3. The final patch in
the set ports the server implementation from a core feature to a
contrib module; to switch between the two approaches, simply leave out
that final patch.

There are still some backend changes that must be made to get this
working, as pointed out in 0009, and obviously libpq support still
requires code changes.

--Jacob

[1] https://www.postgresql.org/message-id/flat/CAJxrbyxTRn5P8J-p%2BwHLwFahK5y56PhK28VOb55jqMO05Y-DJw%40mail.gmail.com

Attachment Content-Type Size
v3-0001-Add-support-for-custom-authentication-methods.patch text/x-patch 11.3 KB
v3-0002-Add-sample-extension-to-test-custom-auth-provider.patch text/x-patch 3.6 KB
v3-0003-Add-tests-for-test_auth_provider-extension.patch text/x-patch 6.1 KB
v3-0004-common-jsonapi-support-FRONTEND-clients.patch text/x-patch 20.4 KB
v3-0005-libpq-add-OAUTHBEARER-SASL-mechanism.patch text/x-patch 35.6 KB
v3-0006-backend-add-OAUTHBEARER-SASL-mechanism.patch text/x-patch 35.5 KB
v3-0007-Add-a-very-simple-authn_id-extension.patch text/x-patch 2.8 KB
v3-0008-Add-pytest-suite-for-OAuth.patch text/x-patch 131.6 KB
v3-0009-contrib-oauth-switch-to-pluggable-auth-API.patch text/x-patch 13.7 KB

In response to

Responses

Browse pgsql-hackers by date

  From Date Subject
Next Message Jacob Champion 2022-03-04 19:15:37 Re: Proposal: Support custom authentication methods using hooks
Previous Message Joshua Brindle 2022-03-04 18:49:34 Re: Proposal: Support custom authentication methods using hooks,Re: Proposal: Support custom authentication methods using hooks