Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1mLAge-0001gj-RP for pgsql-hackers@arkaria.postgresql.org; Tue, 31 Aug 2021 20:48:53 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.92) (envelope-from ) id 1mLAgd-0003cO-Il for pgsql-hackers@arkaria.postgresql.org; Tue, 31 Aug 2021 20:48:51 +0000 Received: from makus.postgresql.org ([2001:4800:3e1:1::229]) by malur.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1mLAgd-0003cF-7I for pgsql-hackers@lists.postgresql.org; Tue, 31 Aug 2021 20:48:51 +0000 Received: from mail-mw2nam08on2065.outbound.protection.outlook.com ([40.107.101.65] helo=NAM04-MW2-obe.outbound.protection.outlook.com) by makus.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1mLAgY-0006eZ-Of for pgsql-hackers@postgresql.org; Tue, 31 Aug 2021 20:48:50 +0000 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=fM6OgtpsTfyyvgjR/ZVQ2aGUrFRuS9q37956HOysfoaLUR9079CcOufpuHFWgUujFKOiQqje8ChYG/VMG6CrqrKNcg+w1UhD4NlwQ+Z6pjRoA5HL2qVluBEutXxeVY9+GtcakIXVadBUXTfvlxg1DoWY5SaxDsMvtCDyQhLdwzUOHP+1/WssBU1BeKDyzeOI/Qb5QCNqizifoHle37FQ5Fys7YA9+YuYwq06cbAyOLLJ2wLLMPu2gEkJvRlWNl3wjX1BJ18YIwzBdow+IIMR/KWNBHiv5Vhy2kQ1M102QIrxxsoytfvVyXCXIsrmb9BPAIJL6Gl2cdts5xynQAjr9Q== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=+QSZvpBsSFYW5kCXn9JuwBsjvkEcZzPZ6B2DeDs2pRk=; b=k6eKSn+6EBeiizfsg4dU2LQxeohgWawh7mFWYU2ALIKBXwJS/M9TXo8w9vv9guAF6riGKfeXS9rNJE/vpirZC2au4PrPvLoUUgIN7l/qcnjMLfmRYcIVaKJcgCREjv0sMBPYX1/iXe9+qB4L9aerJuLW9O6U/YAW4KKReZWjSTxA/coZkroGtTg4b9xyGxVTTkSzGnXUNUv+RFBX5zS9y8vzbwmhCUXcHKQHw0++O4BiYe7WyenpTxD2DcFg6d8RNHPLhu7LgwZPWRL+2Sf5H0FD3sxPsMpnuzNPg8g4wDTRWyqRDgj94tgqXWW2bY5OUE4++fUi8lf3Yv2cRyheqw== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=vmware.com; dmarc=pass action=none header.from=vmware.com; dkim=pass header.d=vmware.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=vmware.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=+QSZvpBsSFYW5kCXn9JuwBsjvkEcZzPZ6B2DeDs2pRk=; b=RSV9IXSWNuq57GNGpHOJo7Go8fSVQZ9cUsvRinhyp8ZUaiAQAGIo/0iC/xV5c3xHB4UvrXoxXAbcucOiftl7yDkfnK/lNePIH3MrV2G/fyJuEHxEfZVL6HFXe3Gijiw8nhU2uVNno+kWdUohAQNPK6oDMTAWeAcA8HxPvTEvx6U= Received: from MWHPR05MB2896.namprd05.prod.outlook.com (2603:10b6:300:65::20) by MW4PR05MB8809.namprd05.prod.outlook.com (2603:10b6:303:12c::12) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.4478.14; Tue, 31 Aug 2021 20:48:43 +0000 Received: from MWHPR05MB2896.namprd05.prod.outlook.com ([fe80::b8ad:c0df:fc49:52a]) by MWHPR05MB2896.namprd05.prod.outlook.com ([fe80::b8ad:c0df:fc49:52a%8]) with mapi id 15.20.4478.017; Tue, 31 Aug 2021 20:48:43 +0000 From: Jacob Champion To: "michael@paquier.xyz" CC: "zyu@yugabyte.com" , "hlinnaka@iki.fi" , "pgsql-hackers@postgresql.org" Subject: Re: [PoC] Federated Authn/z with OAUTHBEARER Thread-Topic: [PoC] Federated Authn/z with OAUTHBEARER Thread-Index: AQHXXISc0BUwpEo1NUi6cD0VutaLHasZf38AgAdCaoCAZEa6AIAAPmyAgAAQj4CAARnbgIAArRAAgAd7mYA= Date: Tue, 31 Aug 2021 20:48:43 +0000 Message-ID: <041e257b44d013d3a5df4b10361a9a264085ba67.camel@vmware.com> References: <2f06a4aef1d5defe4b7aaec01478572e5557d32a.camel@vmware.com> <8a5a35b31c3f25f6b047e77def0445a60399981d.camel@vmware.com> <7fbf5de472907856e95b068bfa1f9167b7555e78.camel@vmware.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Evolution 3.36.5-0ubuntu1 authentication-results: paquier.xyz; dkim=none (message not signed) header.d=none;paquier.xyz; dmarc=none action=none header.from=vmware.com; x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 4a2e271a-f20c-4515-805c-08d96cc0b897 x-ms-traffictypediagnostic: MW4PR05MB8809: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:6790; x-ms-exchange-senderadcheck: 1 x-ms-exchange-antispam-relay: 0 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: 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 x-forefront-antispam-report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:MWHPR05MB2896.namprd05.prod.outlook.com;PTR:;CAT:NONE;SFS:(4636009)(136003)(396003)(376002)(39860400002)(346002)(366004)(4326008)(86362001)(2906002)(316002)(8936002)(8676002)(6512007)(122000001)(38100700002)(6916009)(478600001)(6486002)(71200400001)(38070700005)(26005)(5660300002)(76116006)(186003)(66476007)(66446008)(64756008)(66556008)(66946007)(54906003)(558084003)(36756003)(6506007)(2616005);DIR:OUT;SFP:1101; x-ms-exchange-antispam-messagedata-chunkcount: 1 x-ms-exchange-antispam-messagedata-0: =?utf-8?B?RU1uTUdUQyt6YzgydUFPVFEwVU0xckJ4MGZ1bWhVdWNWYXNnTjEzRUxVZis3?= =?utf-8?B?SjNMdEh2LzZMbjF1RHRCZFJZQTIyVWMyanphQlZGMURPZ0x4ZnlPeVFGSXc4?= =?utf-8?B?dTN6QlJaT3pXNmVYbWxCd1RWUTN5OTBqNkJ5d2QzSmZ6OFZDdlIwT000T1hi?= =?utf-8?B?ZGVodWswMVU5R1ZwNHRocnFycGVqUloxZGJiUGpPZS9HQitMdGRYdDBPbTF0?= =?utf-8?B?cm9QMGwyWHFmMGhlVUtKSEtTbFc5d25UNWlqVGZLVjJZZEN6aEZ0UlFmVTBS?= =?utf-8?B?b0JyVnU1amtlTUFrbnpkazQweVN6VVI3azFSVUJ6andCRTFvZnBWWXY2blVQ?= =?utf-8?B?SGdDOXZnMmhBUy9MOXFETU1qUy91QW9Xdmp3c3hhTVo3WEwvL1dpcU0yMDht?= =?utf-8?B?OVhTditsWExKaGJPWEtXdzRoQ2NDcSs4b2JtN1RXTlNQR3dIRlQ1ajJyRkRX?= =?utf-8?B?UmxTdFFwZDBDdzUxZUxzMUI2SUlsYnNpMEhzSjJIVzJEckdCTlBkUURiR3pl?= =?utf-8?B?dEZPSWI5eDF3cHYxVm4wYUNUUzVSSGF3enFiWjk3QU1SNXMwb0drRFdwY21X?= =?utf-8?B?KzJ2Q3YzUDRoWVZiMlFuYVVucGVqc2pDQkNNQm9oSHdtUm9iZ3hYZHhmSVVu?= =?utf-8?B?dTFSOFRUclZZbHllUjYzOE0wc3NmTWNKWk03d1ZZMXUzZTV0dms5blZXQURn?= =?utf-8?B?cnR0cjYxbFk4VlpaaXlib0RLdTlnTWZDemNqNEI0aHVzWkVjM2dkM2NYYkwx?= =?utf-8?B?NlcxNHIrNWZwbGpTdDQ0c21MNVBBVlZweXZ0MFJ3OEcwU1d2S3NybExIb2JJ?= =?utf-8?B?RXpBSEFqTEVweE93OXJDa2FHcjFIUndPZEpheERQRUxYSmRrQm1oWjMvazhn?= =?utf-8?B?UlZjS1ZYUE9xcWpjR3VmMkdpbzV4WTVnVWJadnBYazNQcFFkWlVUWHZEMjNV?= =?utf-8?B?Rkx2OGp2aUtMNmVqbGZ1N0Zia2lVb3dDMmJDa2M4SkV0SGNyVCtzSG1WTksw?= =?utf-8?B?NkdLZ2VhdDk5amRlZlY4RSs3ZThPNmlIQ011aDRMVjZ2a1kzV0UrcGQxd0RC?= =?utf-8?B?d0lXK1NJSmhUVVFUTTY5OXNNZThLV0FGWU1Fbm9sV29zZE1qSWx0a2NrSU1X?= =?utf-8?B?MndXak1lNm4xdDdERFlyanNWM3hhVVlvUVh1RGdONVIwdFNQRmhIUkMvOUtD?= =?utf-8?B?QllIRzVheEt4aGpHcFhPS0MvdnhkeU51RGRCdndKUm9TUkxrc0Z3dnVldE9E?= =?utf-8?B?a3VkMTkrQ2prWEpGeUF4cUxLS25nZCtFTTBFR3lUWWdOYWh1Q1hxU3lvdkJJ?= =?utf-8?B?Qi9XcmZZc1JndklzNnhLM0ViY0VVNi9PMmhrQjV5QW1UYUw2cWErK2luNFdk?= =?utf-8?B?RWM3L3FuRHVzM09RTFRtdDlWUC9PZ0NMRHdCZGE4d0lWZ1NXaytyNmpHTlAw?= =?utf-8?B?c2dmRFBLRm1ZczhFaFoyUitYeE9YeUxNL25CUkJXZTRQOVNJNGpSMlJuQ2Vh?= =?utf-8?B?Ym44WTRHMXl3WmszakMzV054NVovakhpb3M4U3NBd2h2VitJMUdwdjZjRzlr?= =?utf-8?B?SUI2T29hOUhiQjV0M0szMWpia1Y1Q25pbEoxcU1Xd0hiR2NsaitjVjhmOFQ3?= =?utf-8?B?T3JQNDZpTTZsWmVmUVdRU1E0a2dCNTdneXlRQUQvc0plVDhXQkNtZXdaeXFj?= =?utf-8?B?eUo4RVpYRzNabkEydjZ0Sm5FZmZSSVZFVGZRK2U2bGErMDNrUldRS3kwdE5H?= =?utf-8?Q?8QZPBXs2Ab9O5oHPZt28MFelGd+6c1B0qGPxg6U?= x-ms-exchange-transport-forked: True Content-Type: text/plain; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: vmware.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: MWHPR05MB2896.namprd05.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: 4a2e271a-f20c-4515-805c-08d96cc0b897 X-MS-Exchange-CrossTenant-originalarrivaltime: 31 Aug 2021 20:48:43.4873 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: b39138ca-3cee-4b4a-a4d6-cd83d9dd62f0 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: cnEiP+dZifTZuix7eVA9PiC4wjIYGXaLv8g5Wx0J/cOgrzqikq0hL6vmAGOJld9rvG+7fSZOB1rX6jFC4IF80Q== X-MS-Exchange-Transport-CrossTenantHeadersStamped: MW4PR05MB8809 List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Archived-At: Precedence: bulk T24gRnJpLCAyMDIxLTA4LTI3IGF0IDExOjMyICswOTAwLCBNaWNoYWVsIFBhcXVpZXIgd3JvdGU6 DQo+IE5vdyBpZiB5b3UnZCByZWFsbHkgd2lzaCB0bw0KPiBzdHJlc3MgdGhhdCB3aXRob3V0IHJl bHlpbmcgb24gdGhlIGJhY2tlbmQsIG9uZSBzaW1wbGUgd2F5IGlzIHRvIHVzZQ0KPiBwZ2JlbmNo IC1DIC1uIHdpdGggYSBtb3N0bHktZW1wdHkgc2NyaXB0IChvbmUgbWV0YS1jb21tYW5kKSBjb3Vw bGVkDQo+IHdpdGggc29tZSBwcm9maWxpbmcuDQoNCkFoLCB0aGFua3MhIEknbGwgYWRkIHRoYXQg dG8gdGhlIHRvb2xib3guDQoNCi0tSmFjb2INCg==