Message-ID: <gh-pgjdbc-pgjdbc-3895-rc2842670478@github.com>
From: "davecramer (@davecramer)" <noreply+davecramer@github.com>
To: "pgjdbc/pgjdbc" <noreply+pgjdbc-pgjdbc@github.com>
Date: Mon, 23 Feb 2026 19:28:00 +0000
Subject: Re: [pgjdbc/pgjdbc] PR #3895: implement require_auth, this is pretty much how libpq does this. 
In-Reply-To: <gh-pgjdbc-pgjdbc-3895-rc2840753318@github.com>
References: <gh-pgjdbc-pgjdbc-3895@github.com> <gh-pgjdbc-pgjdbc-3895-rc2840753318@github.com>
List-Id: <gh-pgjdbc-pgjdbc.github.com>
X-GitHub-Author-Login: davecramer
X-GitHub-Comment-Id: 2842670478
X-GitHub-Comment-Type: review_comment
X-GitHub-Commit: 13f1426fb9cbad5f6607368037a765ef92b3875e
X-GitHub-Issue: 3895
X-GitHub-Line: 985
X-GitHub-Path: pgjdbc/src/main/java/org/postgresql/core/v3/ConnectionFactoryImpl.java
X-GitHub-Repo: pgjdbc/pgjdbc
X-GitHub-Type: review_comment
X-GitHub-Url: https://github.com/pgjdbc/pgjdbc/pull/3895#discussion_r2842670478
Content-Type: text/plain; charset=utf-8

(on pgjdbc/src/main/java/org/postgresql/core/v3/ConnectionFactoryImpl.java:985)

Yeah, it's strange the way they implemented encrypted GSS . Starts at https://github.com/pgjdbc/pgjdbc/blob/5aa76f88df5c95f1a8a9f5235ba45acffd5bb50e/pgjdbc/src/main/java/org/postgresql/core/v3/ConnectionFactoryImpl.java#L200 and the function is https://github.com/pgjdbc/pgjdbc/blob/5aa76f88df5c95f1a8a9f5235ba45acffd5bb50e/pgjdbc/src/main/java/org/postgresql/core/v3/ConnectionFactoryImpl.java#L485 I think we have to attempt the encrypted GSS and if it succeeds then fail with an error.