Re: [PoC] Federated Authn/z with OAUTHBEARER

From: Jacob Champion <jacob(dot)champion(at)enterprisedb(dot)com>
To: PostgreSQL Hackers <pgsql-hackers(at)postgresql(dot)org>
Cc: daniel(at)yesql(dot)se, Shlok Kyal <shlok(dot)kyal(dot)oss(at)gmail(dot)com>, mahendrakar s <mahendrakarforpg(at)gmail(dot)com>, Andrey Chudnovsky <achudnovskij(at)gmail(dot)com>, Thomas Munro <thomas(dot)munro(at)gmail(dot)com>, "hlinnaka(at)iki(dot)fi" <hlinnaka(at)iki(dot)fi>, "michael(at)paquier(dot)xyz" <michael(at)paquier(dot)xyz>, "smilingsamay(at)gmail(dot)com" <smilingsamay(at)gmail(dot)com>, Stephen Frost <sfrost(at)snowman(dot)net>
Subject: Re: [PoC] Federated Authn/z with OAUTHBEARER
Date: 2024-02-24 01:01:28
Message-ID: CAOYmi+=WjAk_JswDaRKau_TXy_25hNVC57OC2nUmmn-Xz6yd2g@mail.gmail.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-hackers

On Thu, Feb 22, 2024 at 6:08 AM Jacob Champion
<jacob(dot)champion(at)enterprisedb(dot)com> wrote:
> v15 is a housekeeping update that adds typedefs.list entries and runs
> pgindent.

v16 is more transformational!

Daniel contributed 0004, which completely replaces the
validator_command architecture with a C module API. This solves a
bunch of problems as discussed upthread and vastly simplifies the test
framework for the server side. 0004 also adds a set of Perl tests,
which will begin to subsume some of the Python server-side tests as I
get around to porting them. (@Daniel: 0005 is my diff against your
original patch, for review.)

0008 has been modified to quickfix the pgcommon linkage on the
Makefile side; my previous attempt at this only fixed Meson. The
patchset is now carrying a lot of squash-cruft, and I plan to flatten
it in the next version.

Thanks,
--Jacob

Attachment Content-Type Size
since-v15.diff.txt text/plain 30.7 KB
v16-0005-squash-Introduce-OAuth-validator-libraries.patch.gz application/x-gzip 3.4 KB
v16-0001-common-jsonapi-support-FRONTEND-clients.patch.gz application/x-gzip 6.1 KB
v16-0002-libpq-add-OAUTHBEARER-SASL-mechanism.patch.gz application/x-gzip 34.0 KB
v16-0003-backend-add-OAUTHBEARER-SASL-mechanism.patch.gz application/x-gzip 12.6 KB
v16-0004-Introduce-OAuth-validator-libraries.patch.gz application/x-gzip 8.9 KB
v16-0008-XXX-temporary-patches-to-build-and-test.patch.gz application/x-gzip 1.3 KB
v16-0009-REVERT-temporarily-skip-the-exit-check.patch.gz application/x-gzip 636 bytes
v16-0007-squash-Add-pytest-suite-for-OAuth.patch.gz application/x-gzip 8.1 KB
v16-0006-Add-pytest-suite-for-OAuth.patch.gz application/x-gzip 33.2 KB

In response to

Responses

Browse pgsql-hackers by date

  From Date Subject
Next Message Michael Paquier 2024-02-24 01:06:29 Re: ExecAppendAsyncEventWait() in REL_14_STABLE can corrupt PG_exception_stack
Previous Message David Zhang 2024-02-24 00:10:47 Re: Proposal for implementing OCSP Stapling in PostgreSQL