Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1lvpmV-0005n1-HA for pgsql-hackers@arkaria.postgresql.org; Tue, 22 Jun 2021 23:26:11 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.92) (envelope-from ) id 1lvpmU-0004uf-Fh for pgsql-hackers@arkaria.postgresql.org; Tue, 22 Jun 2021 23:26:10 +0000 Received: from magus.postgresql.org ([2a02:c0:301:0:ffff::29]) by malur.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1lvpmU-0004sn-6p for pgsql-hackers@lists.postgresql.org; Tue, 22 Jun 2021 23:26:10 +0000 Received: from mail-dm6nam11on2063.outbound.protection.outlook.com ([40.107.223.63] helo=NAM11-DM6-obe.outbound.protection.outlook.com) by magus.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1lvpmR-0000OJ-PP for pgsql-hackers@postgresql.org; Tue, 22 Jun 2021 23:26:09 +0000 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=kMojA8FKUQ0fAteZiG4B0nQ2KuNU8HXwbbdHYAGv7U3u9bCGLujE4eoxkBm3R1zxY1LnHv8EH67Uhp8Ogm4lkSsAu4LCLjOsFzzTwiZ6GS8G5GDmWyFHWW8glkQo0TDl/hz6yuuQYWJ1v7DJOVxklapJ2Nr48ARwGVLobRFw2WZgRHLIZ/PntgLoLcxPN6FYGsymxUMEzUeczfLppPtbjezvQ4ZGxRnY6+MOaXvR84zgWmHot1SjUeeC+fAruPMPGjmB1d9TxOPl1OrJId4UxKJdY742t6ebWATYlGxuuEBC5nab98reQNKC/gVUqJ++4ZuTOvjywi6OroZ22c/CGw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=+c3xEDmZ0WhkwaTGcMTYjCR5gNaW9/bhQPp07MVpTYA=; b=C12Yah8JsbF4vPbnztVuvN6vD5dzDcfAPnJx1Y+DyGj3JPZb0yAvPsM28gckTyXH0HZ5DpqpIpCCVmiXB7n+w6vMT7KIk8OTrXV9/dcnC7xse36nshRsbu3fNzGxXj1CygYPhxMYdnizoeGHz+6QQU3FQkXokKkIz7xmdgvcLr2HD22avPoK0zzfVYeVXrSCdUVb8PWqRnGc+d7jttld19Fcpv3SGoLxNqqAy0A4ahj2gkxmpe2V47D5k5rl4eeH+aDun4P3OTrdvjim9ThSCzpItIHbG7NjC4N3X00VlV6tNz4V/uWiljalJdI6ckXUGyXNoHcM62OiBCL1V0Z6gw== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=vmware.com; dmarc=pass action=none header.from=vmware.com; dkim=pass header.d=vmware.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=vmware.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=+c3xEDmZ0WhkwaTGcMTYjCR5gNaW9/bhQPp07MVpTYA=; b=rWwGSX4865hnkPlwcnN050qK6UF7H+Go8Q6z43owox5AzoFXeTsyDJVxJj+yYH5vN0zmjSxJ4cbb8Z/ieAX99tBjyIzeePxneg55w/Pn8tEXKBXM7o81rZrWG+rWaCfKv0+ymA+v9AHxdqp7qmtkBa0WdzPx0W2Qx8yA0tcSXyU= Received: from MWHPR05MB2896.namprd05.prod.outlook.com (2603:10b6:300:65::20) by CO1PR05MB8299.namprd05.prod.outlook.com (2603:10b6:303:fe::17) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.4264.16; Tue, 22 Jun 2021 23:26:04 +0000 Received: from MWHPR05MB2896.namprd05.prod.outlook.com ([fe80::59e1:5f08:31c6:1d3]) by MWHPR05MB2896.namprd05.prod.outlook.com ([fe80::59e1:5f08:31c6:1d3%9]) with mapi id 15.20.4264.018; Tue, 22 Jun 2021 23:26:03 +0000 From: Jacob Champion To: "michael@paquier.xyz" CC: "pgsql-hackers@postgresql.org" Subject: Re: [PoC] Federated Authn/z with OAUTHBEARER Thread-Topic: [PoC] Federated Authn/z with OAUTHBEARER Thread-Index: AQHXXISc0BUwpEo1NUi6cD0VutaLHasZNcMAgAeNIoA= Date: Tue, 22 Jun 2021 23:26:03 +0000 Message-ID: <584426effcd87ca1ace53411f919bcce1539a64a.camel@vmware.com> References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Evolution 3.36.5-0ubuntu1 authentication-results: paquier.xyz; dkim=none (message not signed) header.d=none;paquier.xyz; dmarc=none action=none header.from=vmware.com; x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: dccea0b8-6785-47f2-ebbc-08d935d51a94 x-ms-traffictypediagnostic: CO1PR05MB8299: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:9508; x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: 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 x-forefront-antispam-report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:MWHPR05MB2896.namprd05.prod.outlook.com;PTR:;CAT:NONE;SFS:(4636009)(136003)(376002)(366004)(346002)(396003)(39860400002)(36756003)(6506007)(8936002)(966005)(86362001)(8676002)(186003)(4326008)(478600001)(122000001)(5660300002)(71200400001)(26005)(316002)(76116006)(6916009)(2906002)(6512007)(66946007)(66476007)(66446008)(66556008)(64756008)(6486002)(38100700002)(83380400001)(2616005);DIR:OUT;SFP:1101; x-ms-exchange-antispam-messagedata-chunkcount: 1 x-ms-exchange-antispam-messagedata-0: =?utf-8?B?QlN4RmpqbnIvQ2h6Z3FCVmdIY3NpRXY3ZFBZNDNhV29mVThTa2hBMTJRWDBh?= =?utf-8?B?M203Z2ROZ2hnRHczRDVwR2tvZlJkbjFZUEYvaDVKampZZGUwZkVxSEhJNzJi?= =?utf-8?B?T01Kck9BOG5TeGtidWpzYTBMU3YyaDloVlFNcWZ1NS9XcVJxZnVvQlg3TXBL?= =?utf-8?B?dytwajYybnZ3UE9vTVd3L0czVjJaRUFSQVcrU3BKcTJ1aTdRSjVObjFpa3Ix?= =?utf-8?B?YUo3a3ZJbmRNU0JoYkF2dGM0UHhJTjJVSlR4bFdtejJQa0RmbVB4SlZ1K3cr?= =?utf-8?B?KzJXTGx4MGhXSkVCSkFvWVFNdkZmVDlGUDVzNG1Zc3BYdlQzREs2L04zMFdC?= =?utf-8?B?NksySnBFb1dVZ1V3SWg1WkRJOE1COVNtTElqK1FsTmxlcGVVKzk0VEZWMWpZ?= =?utf-8?B?ZXJjbUJNcE1xNG4veVRBMjQ1TzFwT3BjRnhac2V4T1FPMVd3Y1VDS21xS1du?= =?utf-8?B?WG84OXpKVWNoZzRsNEIxOW9VWGtoWC9YZis5Vk15RUp2OHgwUHpRNXJ1ejN2?= =?utf-8?B?dTF5U2F1TU5VMHZBdXpxcTB2VEdHa0FGWmFVY3pzaCtUU1ZsK0tORjFuU3k1?= =?utf-8?B?RVU5S0dQRVl3TjhDdDB1NHFkNEcvMWFuRXc2VUkyeEpJaFJYajZBNmRUUVVO?= =?utf-8?B?aURsZHVnMjhkdEpwd3NpeUtSSmtweklpWC9xRDU5YXowV0MvT24zTTB1Q2do?= =?utf-8?B?cGdlMzdKdVoyTDhqTWE4c2ZsWU0veVc1eStZcjYySVhGbHFaQlFESjZmam1O?= =?utf-8?B?ZGhnUzJORUNrQzJhSUxiblIyN3VXb3dxei9QLytuWThvQThhOGZ5K2tOTEdM?= =?utf-8?B?OElDUlpuTlViczY4OU9TaUJMOWV5WFpIRy9KUUxJd0NYeFVWelQzcEsrL1Zi?= =?utf-8?B?NVN5YUV3RncrZGs2U1UrWCtjNmdNMkFKblBoWEpkSnJKdDFiK0V0bEdNWU1s?= =?utf-8?B?cW92SGZrUkNoWXhIL1J4ZFY5NW8vSyt1d241K1R4N0FwWjFhK3Y0R1JSOWlv?= =?utf-8?B?SmEyenI0YjZ4ZDV2MUVobzV0dXpPSXJSZURwam96VlZyWU4xczUxVWlReEEy?= =?utf-8?B?ZTNHSFAyajkycy9ySDFxQUExN2xuSWFDSmh2ZExzWk5nYXkrd3A2bUtJcnB4?= =?utf-8?B?b05nUFA4K0hVZ3V0eFJKRE9WVzU0a2d5Unl5ZHJkbmlsSWU0bE5lZmZhdUto?= =?utf-8?B?Uk9vTHVLYzhETjhSVldPYlFWUmQ1ZEdEcWxKYW5NZmliYm1sT1E4NzVPalJa?= =?utf-8?B?VWNNODJidFJycWZPZFZwNHlEWnNLZ3Q3b0xpWGF2bkxNbDgra1V6amk3RG1U?= =?utf-8?B?Q0MzSElGcW01VHY4cHR5Y1FTZGtKVk5UN0FxNGNLZmxOL28vbnB1L1Q4ais3?= =?utf-8?B?V1hDNW5kSWp5dTB1S2M0dHUvOEJNSGM2YWZOUnpQL0N6Y1lUMW91MnlpblhN?= =?utf-8?B?OUswbE9IbWR1KzJKVEJIeklITzVpV3h1em9RTFRNOXVtSXQ1ZXBnQ3BvQVdC?= =?utf-8?B?NzViYWhNM01CQVdyZzhnZnZFbEhMK3lZeERmUHN0YW5FVTFQNTVQTGxJMFJn?= =?utf-8?B?emlkRFg0dlVJWW5zY2d6cit5Mm5hdTVHdGpTa2Y0akxvWGJRdzU4ekZ3eFdr?= =?utf-8?B?U0FLVTY2bmRnYzFhREcvbUtXQkY3bDBOcGFXeWVFaXBSTWlTRGNmRlZQaXJr?= =?utf-8?B?ellkRmxiY2RCeW9acUwvN0l4bnBXS0o1V0JoemdQUlpuOVRaRVB5R3dhUmI2?= =?utf-8?Q?FHnQmrQPUlnJaBk3XKgwA82xGKFr/rqEtsO+Dje?= x-ms-exchange-transport-forked: True Content-Type: text/plain; charset="utf-8" Content-ID: <8CD82341853A5C4BA5447F5A405862C3@namprd05.prod.outlook.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: vmware.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: MWHPR05MB2896.namprd05.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: dccea0b8-6785-47f2-ebbc-08d935d51a94 X-MS-Exchange-CrossTenant-originalarrivaltime: 22 Jun 2021 23:26:03.8909 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: b39138ca-3cee-4b4a-a4d6-cd83d9dd62f0 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: AOIP+mhiWy2hT2lnErXSKtepuMXI71/a3+7tcJK8hzdj+aEWdId6AE4eeogclQzisJ4BCNwetHr0+afP1z5Upg== X-MS-Exchange-Transport-CrossTenantHeadersStamped: CO1PR05MB8299 List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Archived-At: Precedence: bulk T24gRnJpLCAyMDIxLTA2LTE4IGF0IDEzOjA3ICswOTAwLCBNaWNoYWVsIFBhcXVpZXIgd3JvdGU6 DQo+IE9uIFR1ZSwgSnVuIDA4LCAyMDIxIGF0IDA0OjM3OjQ2UE0gKzAwMDAsIEphY29iIENoYW1w aW9uIHdyb3RlOg0KPiA+IDEuIFByZXANCj4gPiANCj4gPiAgIDAwMDEgZGVjb3VwbGVzIHRoZSBT QVNMIGNvZGUgZnJvbSB0aGUgU0NSQU0gaW1wbGVtZW50YXRpb24uDQo+ID4gICAwMDAyIG1ha2Vz IGl0IHBvc3NpYmxlIHRvIHVzZSBjb21tb24vanNvbmFwaSBmcm9tIHRoZSBmcm9udGVuZC4NCj4g PiAgIDAwMDMgbGV0cyB0aGUganNvbl9lcnJkZXRhaWwoKSByZXN1bHQgYmUgZnJlZWQsIHRvIGF2 b2lkIGxlYWtzLg0KPiA+IA0KPiA+IFRoZSBmaXJzdCB0aHJlZSBwYXRjaGVzIGFyZSwgaG9wZWZ1 bGx5LCBnZW5lcmFsbHkgdXNlZnVsIG91dHNpZGUgb2YNCj4gPiB0aGlzIGltcGxlbWVudGF0aW9u LCBhbmQgSSdsbCBwbGFuIHRvIHJlZ2lzdGVyIHRoZW0gaW4gdGhlIG5leHQNCj4gPiBjb21taXRm ZXN0LiBUaGUgbWlkZGxlIHR3byBwYXRjaGVzIGFyZSB0aGUgImludGVyZXN0aW5nIiBwaWVjZXMs IGFuZA0KPiA+IEkndmUgc3BsaXQgdGhlbSBpbnRvIGNsaWVudCBhbmQgc2VydmVyIGZvciBlYXNl IG9mIHVuZGVyc3RhbmRpbmcsDQo+ID4gdGhvdWdoIG5laXRoZXIgaXMgcGFydGljdWxhcmx5IHVz ZWZ1bCB3aXRob3V0IHRoZSBvdGhlci4NCj4gDQo+IEJlZ2lubmluZyB3aXRoIHRoZSBiZWdpbm5p bmcsIGNvdWxkIHlvdSBzcGF3biB0d28gdGhyZWFkcyBmb3IgdGhlDQo+IGpzb25hcGkgcmV3b3Jr IGFuZCB0aGUgU0FTTC9TQ1JBTSBidXNpbmVzcz8NCg0KRG9uZSBbMSwgMl0uIEkndmUgY29waWVk IHlvdXIgY29tbWVudHMgaW50byB0aG9zZSB0aHJlYWRzIHdpdGggbXkNCnJlc3BvbnNlcywgYW5k IEknbGwgaGF2ZSB0aGVtIHJlZ2lzdGVyZWQgaW4gY29tbWl0ZmVzdCBzaG9ydGx5Lg0KDQpUaGFu a3MhDQotLUphY29iDQoNClsxXSBodHRwczovL3d3dy5wb3N0Z3Jlc3FsLm9yZy9tZXNzYWdlLWlk LzNkMmE2ZjVkNTBlNzQxMTE3ZDZiYWY4M2ViNjdlYmYxYThhMzVhMTEuY2FtZWwlNDB2bXdhcmUu Y29tDQpbMl0gaHR0cHM6Ly93d3cucG9zdGdyZXNxbC5vcmcvbWVzc2FnZS1pZC9hMjUwZDQ3NWJh MWMwY2MwZWZiN2RmZWM4ZTUzOGZjYzc3Y2RjYjhlLmNhbWVsJTQwdm13YXJlLmNvbQ0K