Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1v0QeR-00E4ei-Gw for pgsql-general@arkaria.postgresql.org; Sun, 21 Sep 2025 20:27:15 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.94.2) (envelope-from ) id 1v0QeO-00FgEY-0N for pgsql-general@arkaria.postgresql.org; Sun, 21 Sep 2025 20:27:12 +0000 Received: from makus.postgresql.org ([2001:4800:3e1:1::229]) by malur.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1v0QeM-00FgDz-Ts for pgsql-general@lists.postgresql.org; Sun, 21 Sep 2025 20:27:11 +0000 Received: from fout-b3-smtp.messagingengine.com ([202.12.124.146]) by makus.postgresql.org with smtp (Exim 4.96) (envelope-from ) id 1v0QeK-001eD2-0Q for pgsql-general@postgresql.org; Sun, 21 Sep 2025 20:27:09 +0000 Received: from phl-compute-09.internal (phl-compute-09.internal [10.202.2.49]) by mailfout.stl.internal (Postfix) with ESMTP id AE0931D00043 for ; Sun, 21 Sep 2025 16:27:07 -0400 (EDT) Received: from phl-mailfrontend-02 ([10.202.2.163]) by phl-compute-09.internal (MEProxy); Sun, 21 Sep 2025 16:27:07 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=aklaver.com; h= cc:content-transfer-encoding:content-type:content-type:date:date :from:from:in-reply-to:message-id:mime-version:reply-to:subject :subject:to:to; s=fm3; t=1758486427; x=1758572827; bh=RzNbI51qvQ 62f5NBCClB5kcrzFjldsDsZiU8Q/6mV+U=; b=xgBAz3NEUTXRyeLgQrir+O9Dfr gTd0ZF4T4ktfZa7/Zp5uQnxdLjGapj+bW0zU0kz24k8gtxzKkqtExQf/rrj2j2cx X576UZA8xWBLh4iCK+L1ZCSNP4bko7qW5w72w1fnfrtbzcM1CyxjIDIlyZ+xzoyv Ri5AWm/N1mQJdRmHaeMSyjYudWrGNpESEit2r3u8gA0jX+vX+6AEgkKIhgso/5C3 suPX6dHZHnvOLhRljdJWRIpFtef/D/M6hbM5uPfnk1Y33tBGt8OZ/Y9+VekIFqTV 44PeGvQSEk3mVssnCBEAv4A5r6NjFLC/WGknZBbd3cn0NzmJwmWfmOFbr8fQ== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-transfer-encoding:content-type :content-type:date:date:feedback-id:feedback-id:from:from :in-reply-to:message-id:mime-version:reply-to:subject:subject:to :to:x-me-proxy:x-me-sender:x-me-sender:x-sasl-enc; s=fm1; t= 1758486427; x=1758572827; bh=RzNbI51qvQ62f5NBCClB5kcrzFjldsDsZiU 8Q/6mV+U=; b=QPgqBmLeDBjj3CUA18i1Dfv2aqacTvpW5rJthYlkbrf9PgnWSBv wLPjxWeihBPc0iR/yorWsKqTJFqEHuJ8Q7hDdF8BQeukQzlOFaZ8OzoEBrYtEocP zH7bNO5xI5/0rvrR8dC6QQf9TIVXXVgc86ILNaPzMKdj6UmnnE+njj+4uNvv0nd9 0LOX1tYXssipa0MvGQQggTTqbATWp2NzDBzlQ2+o17Tz/YT8EUwkNJE1X4azg+BL Rjkyo928q82TAMkzx+sa8zxT1xvM3zBhrpnlBY36VAG7cBqTebj/K2NwWbgB4/Zd u1S7bHNHIoaRWl6bjCvh1d3IAuNXi4yPOdQ== X-ME-Sender: X-ME-Received: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgeeffedrtdeggdehheelvdcutefuodetggdotefrod ftvfcurfhrohhfihhlvgemucfhrghsthforghilhdpuffrtefokffrpgfnqfghnecuuegr ihhlohhuthemuceftddtnecunecujfgurhepkfffgggfvffhufgtgfesthejredttddvje enucfhrhhomheptegurhhirghnucfmlhgrvhgvrhcuoegrughrihgrnhdrkhhlrghvvghr segrkhhlrghvvghrrdgtohhmqeenucggtffrrghtthgvrhhnpefggedtgfeileegteevie dtkeelhfdufeekleegfeefvefffffftdeltdefheejieenucffohhmrghinhepphhoshht ghhrvghsqhhlrdhorhhgpdhgihhthhhusgdrtghomhenucevlhhushhtvghrufhiiigvpe dtnecurfgrrhgrmhepmhgrihhlfhhrohhmpegrughrihgrnhdrkhhlrghvvghrsegrkhhl rghvvghrrdgtohhmpdhnsggprhgtphhtthhopedupdhmohguvgepshhmthhpohhuthdprh gtphhtthhopehpghhsqhhlqdhgvghnvghrrghlsehpohhsthhgrhgvshhqlhdrohhrgh X-ME-Proxy: Feedback-ID: i76984098:Fastmail Received: by mail.messagingengine.com (Postfix) with ESMTPA for ; Sun, 21 Sep 2025 16:27:06 -0400 (EDT) Message-ID: Date: Sun, 21 Sep 2025 13:27:06 -0700 MIME-Version: 1.0 User-Agent: Mozilla Thunderbird Content-Language: en-US To: pgsql-general From: Adrian Klaver Subject: OAuth validator Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Archived-At: Precedence: bulk Got to the part in the Postgres 18rc Release Notes that goes into the new OAuth support. At some point I would like to explore this, but a sticking point seems to be, from here: https://www.postgresql.org/docs/18/runtime-config-connection.html#GUC-OAUTH-VALIDATOR-LIBRARIES " oauth_validator_libraries [...] Validator modules must be implemented/obtained separately; PostgreSQL does not ship with any default implementations. For more information on implementing OAuth validators, see Chapter 50. " I did find this: https://github.com/TantorLabs/oauth_validator Are there other pre-built implementations and does anyone have experience using the above or other modules? -- Adrian Klaver adrian.klaver@aklaver.com