From: Tom Lane <tgl@sss.pgh.pa.us>
To: Jacob Champion <jacob.champion@enterprisedb.com>
cc: Nathan Bossart <nathandbossart@gmail.com>,
        Daniel Gustafsson <daniel@yesql.se>, Christoph Berg <myon@debian.org>,
        Jelte Fennema-Nio <postgres@jeltef.nl>,
        Peter Eisentraut <peter@eisentraut.org>,
        Andres Freund <andres@anarazel.de>, Bruce Momjian <bruce@momjian.us>,
        PostgreSQL Hackers <pgsql-hackers@postgresql.org>,
        Thomas Munro <thomas.munro@gmail.com>,
        Nazir Bilal Yavuz <byavuz81@gmail.com>,
        Antonin Houska <ah@cybertec.at>,
        Wolfgang Walther <walther@technowledgy.de>,
        =?UTF-8?B?RGV2cmltIEfDvG5kw7x6?= <devrim@gunduz.org>
Subject: Re: [PoC] Federated Authn/z with OAUTHBEARER
In-reply-to: 
 <CAOYmi+=tktL4Pzwfyk_ODyUQPpWQaJs_sUgxtzaSKS2tVYgucw@mail.gmail.com>
References: 
 <CAOYmi+=WA4ZfyHWt+4=yFV7VAXQWvNKsn4R=3PwLd4GfmSTiBA@mail.gmail.com>
 <aAkXb1wdZUDycyWi@msg.df7cb.de>
 <CAOYmi+=cs+gDTAH0L+3JzpRLeHPOXDQxu7MOfsbjah9SkAP_kw@mail.gmail.com>
 <CAOYmi+=UsSnLM4K+hYkhrezpQROQ5jr=72feAkQ0Te8GJf3Fbg@mail.gmail.com>
 <8210C830-DDBB-4CD7-AB39-F5F59C36D547@yesql.se>
 <CAOYmi+mXoq9dUagnkXDgWa72QjCg8SdagBz_yGPUdh1Px0XD5g@mail.gmail.com>
 <FE299814-66B2-47B4-8F06-2B6A7AB508EF@yesql.se>
 <CAOYmi+nF+ov5JxLrLuL6z3Zj7ng3-yJbv0AQFH8VpZm-DNDYUg@mail.gmail.com>
 <CAOYmi+kSX0bdXXSYfv0De6rTx1d77KJAYoHA7+9fmJ64z5dOjw@mail.gmail.com>
 <CAOYmi+kQCDY8+8URaUpYuwyYQuSqj8Woc=02N_tCk-YK7XC-qw@mail.gmail.com>
 <aBTgjDfrdOZmaPgv@nathan>
 <CAOYmi+=CgA=RfvhcKgT6k+G=tFBi0BFk1gWsi6jAZ9dSYV0auQ@mail.gmail.com>
 <CAOYmi+mjsgLkqPzg66h0VmYrnUQrxntYccpx1ubL-ykxRDu6zA@mail.gmail.com>
 <CAOYmi+=pwswyjjXUiL-ej2eUiHxPPWx9u9AZimSmZu3kA2REAA@mail.gmail.com>
 <1921698.1746207330@sss.pgh.pa.us>
 <CAOYmi+n1d61r0D_Q4HRbeV1ReP3BF5QAAZfjRa2SAzLNOGhX9g@mail.gmail.com>
 <1974924.1746210349@sss.pgh.p!
 a.us> <CAOYmi+=tktL4Pzwfyk_ODyUQPpWQaJs_sUgxtzaSKS2tVYgucw@mail.gmail.com>
Comments: In-reply-to Jacob Champion <jacob.champion@enterprisedb.com>
	message dated "Fri, 02 May 2025 11:46:15 -0700"
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-ID: <1977696.1746211956.1@sss.pgh.pa.us>
Content-Transfer-Encoding: quoted-printable
Date: Fri, 02 May 2025 14:52:36 -0400
Message-ID: <1977697.1746211956@sss.pgh.pa.us>
Archived-At: 
 <https://www.postgresql.org/message-id/1977697.1746211956%40sss.pgh.pa.us>
Precedence: bulk

Jacob Champion <jacob.champion@enterprisedb.com> writes:
> Hm. If you clear out the build artifacts under
> src/interfaces/libpq-oauth, and then build with
>     $ ninja -v src/interfaces/libpq-oauth/libpq-oauth.a
> does that help surface anything interesting?

$ rm -rf src/interfaces/libpq-oauth
$ ninja -v src/interfaces/libpq-oauth/libpq-oauth.a
[1/2] ccache cc -Isrc/interfaces/libpq-oauth/libpq-oauth.a.p -Isrc/interfa=
ces/libpq-oauth -I../src/interfaces/libpq-oauth -Isrc/interfaces/libpq -I.=
./src/interfaces/libpq -Isrc/port -I../src/port -Isrc/include -I../src/inc=
lude -I/opt/local/include -I/opt/local/libexec/openssl3/include -fdiagnost=
ics-color=3Dalways -Wall -Winvalid-pch -O2 -g -isysroot /Applications/Xcod=
e.app/Contents/Developer/Platforms/MacOSX.platform/Developer/SDKs/MacOSX15=
.4.sdk -fno-strict-aliasing -fwrapv -fexcess-precision=3Dstandard -Wmissin=
g-prototypes -Wpointer-arith -Werror=3Dvla -Werror=3Dunguarded-availabilit=
y-new -Wendif-labels -Wmissing-format-attribute -Wcast-function-type -Wfor=
mat-security -Wdeclaration-after-statement -Wmissing-variable-declarations=
 -Wno-unused-command-line-argument -Wno-compound-token-split-by-macro -Wno=
-format-truncation -Wno-cast-function-type-strict -MD -MQ src/interfaces/l=
ibpq-oauth/libpq-oauth.a.p/oauth-curl.c.o -MF src/interfaces/libpq-oauth/l=
ibpq-oauth.a.p/oauth-curl.c.o.d -o src/interfaces/libpq-oauth/libpq-oauth.=
a.p/oauth-curl.c.o -c ../src/interfaces/libpq-oauth/oauth-curl.c
[2/2] rm -f src/interfaces/libpq-oauth/libpq-oauth.a && ar csr src/interfa=
ces/libpq-oauth/libpq-oauth.a src/interfaces/libpq-oauth/libpq-oauth.a.p/o=
auth-curl.c.o && ranlib -c src/interfaces/libpq-oauth/libpq-oauth.a

So it's getting -I/opt/local/include and also
-I/opt/local/libexec/openssl3/include from somewhere,
which I guess must be libcurl's pkg-config data ... yup:

$ pkg-config --cflags libcurl
-I/opt/local/include -I/opt/local/libexec/openssl3/include -I/opt/local/in=
clude

I bet Homebrew's libcurl packaging doesn't do that.

			regards, tom lane