public inbox for [email protected]  
help / color / mirror / Atom feed
From: Jacob Champion <[email protected]>
To: Thomas Munro <[email protected]>
Cc: [email protected] <[email protected]>
Cc: mahendrakar s <[email protected]>
Cc: Andrey Chudnovsky <[email protected]>
Cc: [email protected] <[email protected]>
Cc: [email protected] <[email protected]>
Cc: [email protected] <[email protected]>
Cc: Stephen Frost <[email protected]>
Subject: Re: [PoC] Federated Authn/z with OAUTHBEARER
Date: Wed, 30 Aug 2023 15:57:39 -0700
Message-ID: <[email protected]> (raw)
In-Reply-To: <CAAWbhmhFduVC8NbUprAZF_J+aX+_nswdOVouJ1yXYJJGbcbM_Q@mail.gmail.com>
References: <[email protected]>
	<CAAWbhmiWudPQk2euOQQPPa=o14zCN9U_qLwU1pShKO4A-F9yeA@mail.gmail.com>
	<CAAWbhmgWHhqVUkd0nRh59OpVpy_ewfUimqx+NMaWwGNqk=660g@mail.gmail.com>
	<[email protected]>
	<CA+hUKGJE0ioRPZCh-ZA-FwLruss9ntbKkbY_ry--bMF0q1MkTQ@mail.gmail.com>
	<CAAWbhmivwarJHKDnhB=Cn_G9ssq0z8z84W0DmFn9HjTiEpROJw@mail.gmail.com>
	<CA+hUKGLgyH9T+aPjULz5dSfWuY9Ew-jfQ30fXsj=J=5SLmU8Sw@mail.gmail.com>
	<CAAWbhmhkKNQU5cDkhJRMMo+SXZeNh-pP-fbWpVn+9xt2CxJdpQ@mail.gmail.com>
	<CA+hUKGL3_y0qtEiE1XxtSFWw8SU318cn2Tpr=+j-C1d+H=_Y0g@mail.gmail.com>
	<CAAWbhmifDOO7G9dwEPtG743kmMAU6+MR93WSnmF49tTZx1F1Kw@mail.gmail.com>
	<CAAWbhmj0i2L=a2mgMWwQRKa5ijLBrwhUO69+pQEuZe8MzYjGxA@mail.gmail.com>
	<CAAWbhmgb3-S0OVKBXZ8CCyf7a2TpQ7L4EbiF-Q-GaTFqCsjyPg@mail.gmail.com>
	<CA+hUKG+UKU7NCj=kDYiccCZ-FLiUO4Hwgh3tVk+nNJqg+Tp+pg@mail.gmail.com>
	<CAAWbhmhFduVC8NbUprAZF_J+aX+_nswdOVouJ1yXYJJGbcbM_Q@mail.gmail.com>

v11 is a quick rebase over the recent Cirrus changes, and I've dropped
0006 now that psycopg2 can build against BSD/Meson setups (thanks Daniele!).

--Jacob
1:  0278c7ba90 = 1:  36409a76ce common/jsonapi: support FRONTEND clients
2:  bb3ce4b6a9 = 2:  1356b729db libpq: add OAUTHBEARER SASL mechanism
3:  20b7522228 ! 3:  863a49f863 backend: add OAUTHBEARER SASL mechanism
    @@ src/backend/utils/misc/guc_tables.c
      #include "nodes/queryjumble.h"
      #include "optimizer/cost.h"
     @@ src/backend/utils/misc/guc_tables.c: struct config_string ConfigureNamesString[] =
    - 		check_io_direct, assign_io_direct, NULL
    + 		check_debug_io_direct, assign_debug_io_direct, NULL
      	},
      
     +	{
4:  f3cec068f9 = 4:  348554e5f4 Add pytest suite for OAuth
5:  da1933ac1d ! 5:  16d3984a45 squash! Add pytest suite for OAuth
    @@ Commit message
         - The with_oauth test skip logic should probably be integrated into the
           Makefile side as well...
     
    - ## .cirrus.yml ##
    -@@ .cirrus.yml: env:
    + ## .cirrus.tasks.yml ##
    +@@ .cirrus.tasks.yml: env:
        MTEST_ARGS: --print-errorlogs --no-rebuild -C build
        PGCTLTIMEOUT: 120 # avoids spurious failures during parallel tests
        TEMP_CONFIG: ${CIRRUS_WORKING_DIR}/src/tools/ci/pg_ci_base.conf
    @@ .cirrus.yml: env:
      
      
      # What files to preserve in case tests fail
    -@@ .cirrus.yml: task:
    +@@ .cirrus.tasks.yml: task:
          chown root:postgres /tmp/cores
          sysctl kern.corefile='/tmp/cores/%N.%P.core'
        setup_additional_packages_script: |
    @@ .cirrus.yml: task:
      
        # NB: Intentionally build without -Dllvm. The freebsd image size is already
        # large enough to make VM startup slow, and even without llvm freebsd
    -@@ .cirrus.yml: task:
    +@@ .cirrus.tasks.yml: task:
              --buildtype=debug \
              -Dcassert=true -Duuid=bsd -Dtcl_version=tcl86 -Ddtrace=auto \
              -DPG_TEST_EXTRA="$PG_TEST_EXTRA" \
    @@ .cirrus.yml: task:
              -Dextra_lib_dirs=/usr/local/lib -Dextra_include_dirs=/usr/local/include/ \
              build
          EOF
    -@@ .cirrus.yml: LINUX_CONFIGURE_FEATURES: &LINUX_CONFIGURE_FEATURES >-
    +@@ .cirrus.tasks.yml: LINUX_CONFIGURE_FEATURES: &LINUX_CONFIGURE_FEATURES >-
        --with-libxslt
        --with-llvm
        --with-lz4
    @@ .cirrus.yml: LINUX_CONFIGURE_FEATURES: &LINUX_CONFIGURE_FEATURES >-
        --with-pam
        --with-perl
        --with-python
    -@@ .cirrus.yml: LINUX_CONFIGURE_FEATURES: &LINUX_CONFIGURE_FEATURES >-
    +@@ .cirrus.tasks.yml: LINUX_CONFIGURE_FEATURES: &LINUX_CONFIGURE_FEATURES >-
      
      LINUX_MESON_FEATURES: &LINUX_MESON_FEATURES >-
        -Dllvm=enabled
    @@ .cirrus.yml: LINUX_CONFIGURE_FEATURES: &LINUX_CONFIGURE_FEATURES >-
        -Duuid=e2fs
      
      
    -@@ .cirrus.yml: task:
    +@@ .cirrus.tasks.yml: task:
          EOF
      
        setup_additional_packages_script: |
    @@ .cirrus.yml: task:
      
        matrix:
          - name: Linux - Debian Bullseye - Autoconf
    -@@ .cirrus.yml: task:
    +@@ .cirrus.tasks.yml: task:
          folder: $CCACHE_DIR
      
        setup_additional_packages_script: |
    @@ src/test/python/requirements.txt
      construct~=2.10.61
      isort~=5.6
      # TODO: update to psycopg[c] 3.1
    +-psycopg2~=2.9.6
    ++psycopg2~=2.9.7
    + pytest~=7.3
    + pytest-asyncio~=0.21.0
     
      ## src/test/python/server/conftest.py ##
     @@
6:  8f36b5c124 < -:  ---------- XXX work around psycopg2 build failures


Attachments:

  [text/plain] since-v10.diff.txt (3.3K, ../[email protected]/2-since-v10.diff.txt)
  download | inline:
1:  0278c7ba90 = 1:  36409a76ce common/jsonapi: support FRONTEND clients
2:  bb3ce4b6a9 = 2:  1356b729db libpq: add OAUTHBEARER SASL mechanism
3:  20b7522228 ! 3:  863a49f863 backend: add OAUTHBEARER SASL mechanism
    @@ src/backend/utils/misc/guc_tables.c
      #include "nodes/queryjumble.h"
      #include "optimizer/cost.h"
     @@ src/backend/utils/misc/guc_tables.c: struct config_string ConfigureNamesString[] =
    - 		check_io_direct, assign_io_direct, NULL
    + 		check_debug_io_direct, assign_debug_io_direct, NULL
      	},
      
     +	{
4:  f3cec068f9 = 4:  348554e5f4 Add pytest suite for OAuth
5:  da1933ac1d ! 5:  16d3984a45 squash! Add pytest suite for OAuth
    @@ Commit message
         - The with_oauth test skip logic should probably be integrated into the
           Makefile side as well...
     
    - ## .cirrus.yml ##
    -@@ .cirrus.yml: env:
    + ## .cirrus.tasks.yml ##
    +@@ .cirrus.tasks.yml: env:
        MTEST_ARGS: --print-errorlogs --no-rebuild -C build
        PGCTLTIMEOUT: 120 # avoids spurious failures during parallel tests
        TEMP_CONFIG: ${CIRRUS_WORKING_DIR}/src/tools/ci/pg_ci_base.conf
    @@ .cirrus.yml: env:
      
      
      # What files to preserve in case tests fail
    -@@ .cirrus.yml: task:
    +@@ .cirrus.tasks.yml: task:
          chown root:postgres /tmp/cores
          sysctl kern.corefile='/tmp/cores/%N.%P.core'
        setup_additional_packages_script: |
    @@ .cirrus.yml: task:
      
        # NB: Intentionally build without -Dllvm. The freebsd image size is already
        # large enough to make VM startup slow, and even without llvm freebsd
    -@@ .cirrus.yml: task:
    +@@ .cirrus.tasks.yml: task:
              --buildtype=debug \
              -Dcassert=true -Duuid=bsd -Dtcl_version=tcl86 -Ddtrace=auto \
              -DPG_TEST_EXTRA="$PG_TEST_EXTRA" \
    @@ .cirrus.yml: task:
              -Dextra_lib_dirs=/usr/local/lib -Dextra_include_dirs=/usr/local/include/ \
              build
          EOF
    -@@ .cirrus.yml: LINUX_CONFIGURE_FEATURES: &LINUX_CONFIGURE_FEATURES >-
    +@@ .cirrus.tasks.yml: LINUX_CONFIGURE_FEATURES: &LINUX_CONFIGURE_FEATURES >-
        --with-libxslt
        --with-llvm
        --with-lz4
    @@ .cirrus.yml: LINUX_CONFIGURE_FEATURES: &LINUX_CONFIGURE_FEATURES >-
        --with-pam
        --with-perl
        --with-python
    -@@ .cirrus.yml: LINUX_CONFIGURE_FEATURES: &LINUX_CONFIGURE_FEATURES >-
    +@@ .cirrus.tasks.yml: LINUX_CONFIGURE_FEATURES: &LINUX_CONFIGURE_FEATURES >-
      
      LINUX_MESON_FEATURES: &LINUX_MESON_FEATURES >-
        -Dllvm=enabled
    @@ .cirrus.yml: LINUX_CONFIGURE_FEATURES: &LINUX_CONFIGURE_FEATURES >-
        -Duuid=e2fs
      
      
    -@@ .cirrus.yml: task:
    +@@ .cirrus.tasks.yml: task:
          EOF
      
        setup_additional_packages_script: |
    @@ .cirrus.yml: task:
      
        matrix:
          - name: Linux - Debian Bullseye - Autoconf
    -@@ .cirrus.yml: task:
    +@@ .cirrus.tasks.yml: task:
          folder: $CCACHE_DIR
      
        setup_additional_packages_script: |
    @@ src/test/python/requirements.txt
      construct~=2.10.61
      isort~=5.6
      # TODO: update to psycopg[c] 3.1
    +-psycopg2~=2.9.6
    ++psycopg2~=2.9.7
    + pytest~=7.3
    + pytest-asyncio~=0.21.0
     
      ## src/test/python/server/conftest.py ##
     @@
6:  8f36b5c124 < -:  ---------- XXX work around psycopg2 build failures

  [application/gzip] v11-0001-common-jsonapi-support-FRONTEND-clients.patch.gz (6.6K, ../[email protected]/3-v11-0001-common-jsonapi-support-FRONTEND-clients.patch.gz)
  download

  [application/gzip] v11-0002-libpq-add-OAUTHBEARER-SASL-mechanism.patch.gz (30.9K, ../[email protected]/4-v11-0002-libpq-add-OAUTHBEARER-SASL-mechanism.patch.gz)
  download

  [application/gzip] v11-0003-backend-add-OAUTHBEARER-SASL-mechanism.patch.gz (12.4K, ../[email protected]/5-v11-0003-backend-add-OAUTHBEARER-SASL-mechanism.patch.gz)
  download

  [application/gzip] v11-0004-Add-pytest-suite-for-OAuth.patch.gz (31.9K, ../[email protected]/6-v11-0004-Add-pytest-suite-for-OAuth.patch.gz)
  download

  [application/gzip] v11-0005-squash-Add-pytest-suite-for-OAuth.patch.gz (7.9K, ../[email protected]/7-v11-0005-squash-Add-pytest-suite-for-OAuth.patch.gz)
  download

view thread (12+ messages)

reply

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Reply to all the recipients using the --to and --cc options:
  reply via email

  To: [email protected]
  Cc: [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected]
  Subject: Re: [PoC] Federated Authn/z with OAUTHBEARER
  In-Reply-To: <[email protected]>

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

This inbox is served by agora; see mirroring instructions
for how to clone and mirror all data and code used for this inbox