Re: [oauth] Stabilize the libpq-oauth ABI (and allow alternative implementations?)

From: Jacob Champion <jacob(dot)champion(at)enterprisedb(dot)com>
To: Zsolt Parragi <zsolt(dot)parragi(at)percona(dot)com>
Cc: PostgreSQL Hackers <pgsql-hackers(at)postgresql(dot)org>, Chao Li <li(dot)evan(dot)chao(at)gmail(dot)com>
Subject: Re: [oauth] Stabilize the libpq-oauth ABI (and allow alternative implementations?)
Date: 2026-03-06 00:57:13
Message-ID: CAOYmi+nRmt+K+ZVNztKFv=LuasDCCSsXLihZB6BEkVeroW8EvA@mail.gmail.com
Views: Whole Thread | Raw Message | Download mbox | Resend email
Thread:
Lists: pgsql-hackers

On Tue, Mar 3, 2026 at 2:08 PM Jacob Champion
<jacob(dot)champion(at)enterprisedb(dot)com> wrote:
> I don't plan to block the other patches on -0006, since -0004 is
> blocking PGOAUTHCAFILE.

v5-0001 and -0002 are now committed. Attached is a v6 rebase with some
minor self-review fixups and the removal of ASan from the poisoning
experiment.

v6-0001 through -0003 are targeted for commit next. I'll leave -0004
for later; I plan to ask for some committer review, since it's pretty
unusual code for libpq, but it needs a real commit message and some
better docs first.

As for -0005: I think I'll cherry-pick only the ability for the
libpq_oauth_init entry to be optional, marking any flows that don't
provide it as user-defined, to make it possible for v19 developers to
help us iterate on v20 if they want.

Thanks,
--Jacob

Attachment Content-Type Size
since-v5.diff.txt text/plain 7.0 KB
v6-0001-libpq-Introduce-PQAUTHDATA_OAUTH_BEARER_TOKEN_V2.patch application/octet-stream 24.5 KB
v6-0002-libpq-oauth-Use-the-PGoauthBearerRequestV2-API.patch application/octet-stream 43.5 KB
v6-0003-libpq-oauth-Never-link-against-libpq-s-encoding-f.patch application/octet-stream 3.2 KB
v6-0004-WIP-test-out-poisoning.patch application/octet-stream 5.9 KB
v6-0005-WIP-Introduce-third-party-OAuth-flow-plugins.patch application/octet-stream 38.8 KB

In response to

Responses

Browse pgsql-hackers by date

  From Date Subject
Next Message Jacob Champion 2026-03-06 01:03:52 Re: [PATCH] Add PQgetThreadLock() to expose the Kerberos/Curl mutex
Previous Message Chao Li 2026-03-06 00:54:35 Re: [BUG + PATCH] DSA pagemap out-of-bounds in make_new_segment odd-sized path