Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1u2CSl-00EZah-Cn for pgsql-hackers@arkaria.postgresql.org; Tue, 08 Apr 2025 17:10:15 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.94.2) (envelope-from ) id 1u2CSj-00CY41-MF for pgsql-hackers@arkaria.postgresql.org; Tue, 08 Apr 2025 17:10:14 +0000 Received: from makus.postgresql.org ([2001:4800:3e1:1::229]) by malur.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1u2CSj-00CY3t-Cl for pgsql-hackers@lists.postgresql.org; Tue, 08 Apr 2025 17:10:13 +0000 Received: from dd25110.kasserver.com ([85.13.146.49]) by makus.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1u2CSg-003iSh-00 for pgsql-hackers@postgresql.org; Tue, 08 Apr 2025 17:10:12 +0000 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=technowledgy.de; s=kas202308201259; t=1744132208; bh=hgMlAd6Yd8qHrrzhQ6XfpoywvscthFlS2tdzDx2ODJ0=; h=Date:Subject:To:Cc:References:From:In-Reply-To:From; b=Nj7zWwoPFpUTGHashOmrnWWQHy4dLqOOaIgLgYcWbexYw8z3kLTjSvVZSOjwS/sfJ a3a9+hw+WhdEIBiSuKhCnbPcqGv5kwLslPRi4biFNn7Gtd77If94V6n93Iq/jUgBd1 5Yp3sfwfoq5MfloA7mYUH64erSrViXIE4AAvt4Qp4OzgOMnMVEFkQPmjU8iXMpmTEU RGZJqmYHes5rpgx8ugpNMv4t4spjf5Z4BvExy0pReN/hf72JpxMMTgAFTyZWeC1MEK Exd0v/uzYPGIKEnzqJ2G9n93Sw5mFSXyOC5Syll1kAv1ZsGAAhQM79OMC0PnU0DoYn KtMV+y1IvMBqQ== Received: from [192.168.0.102] (ip-037-201-153-223.um10.pools.vodafone-ip.de [37.201.153.223]) by dd25110.kasserver.com (Postfix) with ESMTPSA id 0317DE1A01B8; Tue, 8 Apr 2025 19:10:07 +0200 (CEST) Content-Type: multipart/alternative; boundary="------------2QxTsz3njyZtLj5IP0l1lVZg" Message-ID: <214ec3cc-7531-4360-8103-663581d2149f@technowledgy.de> Date: Tue, 8 Apr 2025 19:10:07 +0200 MIME-Version: 1.0 User-Agent: Mozilla Thunderbird Subject: Re: [PoC] Federated Authn/z with OAUTHBEARER Content-Language: en-US To: Jacob Champion Cc: Bruce Momjian , Daniel Gustafsson , Christoph Berg , Andres Freund , Peter Eisentraut , Tom Lane , PostgreSQL Hackers , Thomas Munro , Nazir Bilal Yavuz , Antonin Houska References: <96b5b38b-2fac-409f-b922-f7fd653bf847@technowledgy.de> <18f84e6a-41cf-4313-8bea-6007868dd05a@technowledgy.de> From: Wolfgang Walther In-Reply-To: X-Spamd-Bar: + List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Archived-At: Precedence: bulk This is a multi-part message in MIME format. --------------2QxTsz3njyZtLj5IP0l1lVZg Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit Jacob Champion: >> However, if the other deps are considered problematic as well, then the >> ship has already sailed, and there is not point for a special case here >> anymore. > I think this line of argument is unlikely to find traction. Upthread > there were people asking if we could maybe split out other > possibly-unused dependencies in the future, like Kerberos. Well, yes, that's kind of what I'm saying. There shouldn't be a special case for cURL, but those other deps should be handled equally as well. And if that means making libpq modular at run-time, then this should be planned and built with all deps, and other use-cases (like static linking) in mind - and not like it is right now. Best, Wolfgang --------------2QxTsz3njyZtLj5IP0l1lVZg Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: 7bit
Jacob Champion:
However, if the other deps are considered problematic as well, then the
ship has already sailed, and there is not point for a special case here
anymore.
I think this line of argument is unlikely to find traction. Upthread
there were people asking if we could maybe split out other
possibly-unused dependencies in the future, like Kerberos.

Well, yes, that's kind of what I'm saying. There shouldn't be a special case for cURL, but those other deps should be handled equally as well.

And if that means making libpq modular at run-time, then this should be planned and built with all deps, and other use-cases (like static linking) in mind - and not like it is right now.

Best,

Wolfgang

--------------2QxTsz3njyZtLj5IP0l1lVZg--