Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1tv1gu-00FtSg-Hh for pgsql-hackers@arkaria.postgresql.org; Wed, 19 Mar 2025 22:15:12 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.94.2) (envelope-from ) id 1tv1gr-00Ccuj-9C for pgsql-hackers@arkaria.postgresql.org; Wed, 19 Mar 2025 22:15:09 +0000 Received: from makus.postgresql.org ([2001:4800:3e1:1::229]) by malur.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1tv1gq-00Ccub-VW for pgsql-hackers@lists.postgresql.org; Wed, 19 Mar 2025 22:15:08 +0000 Received: from mail-ot1-x329.google.com ([2607:f8b0:4864:20::329]) by makus.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (Exim 4.96) (envelope-from ) id 1tv1gp-0000ma-0m for pgsql-hackers@postgresql.org; Wed, 19 Mar 2025 22:15:08 +0000 Received: by mail-ot1-x329.google.com with SMTP id 46e09a7af769-72b938f6014so36912a34.3 for ; Wed, 19 Mar 2025 15:15:06 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1742422506; x=1743027306; darn=postgresql.org; h=content-transfer-encoding:cc:to:subject:message-id:date:from :in-reply-to:references:mime-version:from:to:cc:subject:date :message-id:reply-to; bh=wz0dIb1jNAmKmOJBU4uGRccwkE4cRKWkMx64gaSBgyE=; b=Es1OF7/yLr6UGZ9dZYZqeP8vjNSPeKj/IntjY7SX8XhvEm8VNj7B3ygT8r2NCxjRI/ RvYsFcs+fWmy7CHZ3hQX3tFNFe2zemjzk3xlbypb6RUL2vuKEnkrjw0vMmt2Ox6XL0hQ XQH60OT7U2gW+uiqUBtA47jAIOCwfbRFWe5vmjW+5CZoB0zI1yp74Gcdy35rWDCWzqsw aHUSDo9tARxj1JRdlyFeuhzByydB2VmzIUkRW+aPCsc6UyASBfr8gnFNpJttZgyANa4j +RatiugcYW5FVjO7lWOuqLSRjrCAs9IJ30GxeBQNSO92TLeNMpTN1/ugrKXLzXFRWn7I cgIQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1742422506; x=1743027306; h=content-transfer-encoding:cc:to:subject:message-id:date:from :in-reply-to:references:mime-version:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=wz0dIb1jNAmKmOJBU4uGRccwkE4cRKWkMx64gaSBgyE=; b=T0WXYVKwMWpKkK9ea/r1T/ekZokM6fH9IkJyNnsKrOnOLpzNfesFM36aPY2mS5ebUy DJJHkIJTmczC05KbcfdgIsXYiZ86+/a7ymUHC/mzpUYqLy/7kyv+lHkewy31KRNfqtoI eS1NTJyDK4DZ0RsbivA7NUGEZhGIHrT4gqgc9nC3/Rg8O0dPfFl7tg3hfa/LPwCTpnSY 6Ri5cOZZFroF2XHrrYN0uiInIZvO59F2lnsgBSZbEt5CMa3irvak0yhf8HppapcOBCQI JR8JiJcisyvi6YHr0u2eK5wdSPw3c7paBK0+JzYAB/uZMJhi+3vYM8aWI0jaCh7OcIqA cdow== X-Forwarded-Encrypted: i=1; AJvYcCXTJnvPZafqOyybhg+1QkK8X9+XDmH4I6X4NvuLmshW2B+nAVXXfHJuFP/lhGCRc5lX3e+bs/x6qhnGjsLH@postgresql.org X-Gm-Message-State: AOJu0Yx65NujqGSdJ+5ssWSNJdTPMKaekMg2FHy4IyMw4VQ8EGwG2qRm JFDwgQ7UF1gTjPQd56chJRFapsJrpwYkJXsXQrzO9NaAufGXi6XkXMh/8OeL/7hboSbmce/TR3q swpzA7n5YswRf9zjF0BWY5i9W32Y= X-Gm-Gg: ASbGnctL2HRNJZWJHPhBSNHiJRSFMO81Fu8WMLjBN6gF8CJsL+AqnBzlWMi25vvhlx1 nA0RmiSknGPSBMbMyF2t4sqbNMU9bNR7KAR7YVK/dcbgZPwLEfjeUn2jrTJQIWmOkPn0ySLStui 8A+WuKle8R1efSCFcAEC+WmWON3sXcwYYR+v2iag== X-Google-Smtp-Source: AGHT+IGaS38NPTbKFHlqP52CfY7QQPh38DqOgm1oFqHNm+6fRLy32jlgRK1Mcu51v6PeFnx+H2le3Uts0rM96RplFYM= X-Received: by 2002:a05:6871:3410:b0:2c1:d224:bcd2 with SMTP id 586e51a60fabf-2c745542a2bmr973243fac.4.1742422506286; Wed, 19 Mar 2025 15:15:06 -0700 (PDT) MIME-Version: 1.0 References: <83C44AB4-24B0-437F-B139-B5CBC5821BB1@yesql.se> <2A1511A0-C04B-47E4-B1C3-54C2A1C765B8@yesql.se> <13F329B6-86BC-40A5-96F4-102784A0357A@yesql.se> <636879.1742357835@sss.pgh.pa.us> <641687.1742360249@sss.pgh.pa.us> <814794.1742418239@sss.pgh.pa.us> In-Reply-To: From: Thomas Munro Date: Thu, 20 Mar 2025 11:14:29 +1300 X-Gm-Features: AQ5f1JpGcOa3_dL4wqdC8AXZlCJWtc50yEYp9A8njivtIzfmtHjmbn_QO85Mhcc Message-ID: Subject: Re: [PoC] Federated Authn/z with OAUTHBEARER To: Tom Lane Cc: Daniel Gustafsson , Jacob Champion , Nazir Bilal Yavuz , Andres Freund , Peter Eisentraut , Antonin Houska , PostgreSQL Hackers Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Archived-At: Precedence: bulk On Thu, Mar 20, 2025 at 11:02=E2=80=AFAM Thomas Munro wrote: > On Thu, Mar 20, 2025 at 10:04=E2=80=AFAM Tom Lane wro= te: > > Thomas Munro writes: > > > How feasible/fragile/weird would it be to dlopen() it on demand? . o O { There may also be security reasons to reject the idea, would need to look into that... }