Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1vs4SH-004AI9-1o for pgsql-hackers@arkaria.postgresql.org; Mon, 16 Feb 2026 19:40:25 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.96) (envelope-from ) id 1vs4SG-005FbT-12 for pgsql-hackers@arkaria.postgresql.org; Mon, 16 Feb 2026 19:40:24 +0000 Received: from makus.postgresql.org ([2001:4800:3e1:1::229]) by malur.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1vs4SF-005Fat-3C for pgsql-hackers@lists.postgresql.org; Mon, 16 Feb 2026 19:40:24 +0000 Received: from mail-yw1-x1135.google.com ([2607:f8b0:4864:20::1135]) by makus.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (Exim 4.98.2) (envelope-from ) id 1vs4SD-00000000wTq-14k6 for pgsql-hackers@lists.postgresql.org; Mon, 16 Feb 2026 19:40:23 +0000 Received: by mail-yw1-x1135.google.com with SMTP id 00721157ae682-79430ef54c3so29050927b3.2 for ; Mon, 16 Feb 2026 11:40:21 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; t=1771270821; cv=none; d=google.com; s=arc-20240605; b=f/+abxt6ESA1Gc7SJOh42UFk4FRoWWwy2gaoeRjvv6BCsCDP1Jka/DSnE9pR0UKNmn PUVV74fJDGUngqJDi8pD4S0m0iW7vgdkvAt5OaxnM9j/8+1h/efrcadt9rWZ2o1yEoWl Wg/n6G+hOrDEqeQckmiy60GALIjDvxMSnPgPxVh877NpaykuHpSQP24lqDDTw4TZP0hY G6XCqVJOg6QFjEmdsA+rVzvYwPTSKTzTjXGnZwF0sHZo6pYetBvfx4Q5Cp27Bs/R18tj VyWfxReqLh9Iu78lcwC96GdH2+krRobgL8HNNJjqPlSXN9WiAvlDQSshiWt7hjE03fAl cVzA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:dkim-signature; bh=wQAT2xtsrrarBHuSR5RDx0WrsspKuaAROz2PIH/S2eA=; fh=To16Y1pBSJY2ZeUKQBX2ov9cAqiddqbWGZai5L5wwYo=; b=KWmMEl5PQQsMkpjwm7Cgs2O4Kenxki8nQhEHwi5S4uqvC7r59s1/SWu1OtiSIJSnI9 xDKDReuXaJYdIXJ/Et/+qAJ4p5qS7bEg3og2/Lm7zN2bK8htPLiC0oM8ZHpz6JND7fPi TEHe31Lb1saHQVVA4utlxy0vE/bWnu97OMB8QmXnYncj8jotkn6eIJ6ayaMm19KcoS6N 37ML5v7r4ZmBs3GQ9LJ0F6yrjArVD50/5tv1/M26HvcmsxmyACI01gVSBnyhruvZZ4fF fH7RflHcMw6Bq9iQLUVzOifLddizoIeN+VSpwjvQeE/Mn3Ik2MPOovWktxLSv65yxWxM IydA==; darn=lists.postgresql.org ARC-Authentication-Results: i=1; mx.google.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=percona.com; s=google; t=1771270821; x=1771875621; darn=lists.postgresql.org; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:from:to:cc:subject:date:message-id:reply-to; bh=wQAT2xtsrrarBHuSR5RDx0WrsspKuaAROz2PIH/S2eA=; b=bf/K2pGqPsb33dhmCwADuV6uf25kACXny/p0poWSdtlMK2uSQXdoz7dSgVi67+WeSG tUYHfBZt9nyxpm5Ib9NOezcIfutA1f09+/Hz4BhsMoQU4ug+gUSgnBxO3xn/ZivHiebn 0xnvcBKh1E/9SVcsrnhV+Yp//dZt6RZ7A4ra0= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1771270821; x=1771875621; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:x-gm-gg:x-gm-message-state:from:to:cc:subject:date :message-id:reply-to; bh=wQAT2xtsrrarBHuSR5RDx0WrsspKuaAROz2PIH/S2eA=; b=buXyBoACxZdbL/r85TKuzaQT9/tNXRxgW/kCip0KwiW/6GqeiErPcZ84zA8go2lX9F 1ioBbtyYnfX/xnAKFhxb+lIbMJLwPhVORopobG67sefKjkqN8Up2dKgBH3GP5AMwXrxD HoEMJbMBM+oT/Eovi+BFyiSRwPtUhO2j3zCGsK+B7mi8t9Fd0qr83kgpEMBkPwNJWUrO kndSdWkdw0kt/Gg4k4hTtJqBEJ2tFiDIp/N71UjDVnu0w7izVYAzhgOk0swKcSao/j9K iyDcSdT1jWgG5yT3l9WhWcpsWc4ypkqDdMmR41+CuEyLWqQk9MbtO4OqrF5XPyxMivyT 40sg== X-Forwarded-Encrypted: i=1; AJvYcCUAlHy3DRtLiFj08cO5IO/sLQ9cKrCTl1yopa/xeNlN5iIjwlrrKo2COXv1C/CpxlxURoHbhPA+T3TSLkZv@lists.postgresql.org X-Gm-Message-State: AOJu0Yx3FVZkiR2Fxpqybl7h9m68LyUnJWfZkxyhYdAvm5N8Oj1CgZDJ Di/n7nqG+HttA4Cogt3iFSGFr9q/fOW4RUx9NEGr7xSfMZg7GUTTpSEOma74X14Zwpd01J6qhQH kfauv+70rRmLiiC71jlxiL4lAfCCfELtWUa4htTmDO19wRDY/VkGFzTDVvO52kqgLrvvUV68fFP 1g3wGLtJo3yoGU/gHVwT31o+wvnatRpW9P+FEyuZz8lgkDRUywsW6vdVZ2zwVFpf6T3ZPPbh6g8 K8HrHjcVtsRI2iehnPRK+fSmrWIHeYTGM+gDX6ZhTKrKip+YAaLaKiXn2A6uR4kxaE= X-Gm-Gg: AZuq6aLOeuG0Arc6w/XUamrvM8JeHf6frXLDGN2mjGF2wVVo05acihvr9qVgq4JTQUO IcuWcezLEI5gQsAq/0+ra6C2cLoq06bK+pnGJwyHwSScgwmJTL/C/WtvYMSvD9tnN5WKIxvoZ/f JVdMV1YSwQX8F0DMYf9Se/giwS4IoGcYwYjY72ePP9CtUr9pOTAbE8tXXZ8p+68LpL/qwn2ujYU QNrmesIaX3w8QSM5P1mt5x6hB0puq1oXFQ/ti2VKJKvLfWDDU7Jots570VYsHjKhtODvOoGggav HZuL57oY3asS5qioc8g6pTSztOucO0WC3PI6/+Z7TlvnjK8aLrUr/53Bs+8AMnzA6/Ql X-Received: by 2002:a05:690c:1a:b0:796:3c5d:70bf with SMTP id 00721157ae682-797ac5570c3mr67354797b3.29.1771270821069; Mon, 16 Feb 2026 11:40:21 -0800 (PST) MIME-Version: 1.0 References: In-Reply-To: From: Zsolt Parragi Date: Mon, 16 Feb 2026 19:40:09 +0000 X-Gm-Features: AaiRm50_2Wbe6-lA7MgmYT1meM6Nx_Ka4WTyvFMXmWCzrDDU6SXXwwu-GyGrR4Y Message-ID: Subject: Re: [OAuth2] Infrastructure for tracking token expiry time To: VASUKI M Cc: Ajit Awekar , PostgreSQL Hackers Content-Type: text/plain; charset="UTF-8" X-CLOUD-SEC-AV-Sent: true X-CLOUD-SEC-AV-Info: percona,google_mail,monitor X-Gm-Spam: 0 X-Gm-Phishy: 0 List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Archived-At: Precedence: bulk Hello This API looks simple for providers that use JWT access tokens, but what about providers that use opaque tokens and an introspection API to check validity instead? Some validators might not be able to provide anything meaningful without a periodic call to a "check validity now" method, and even some providers that use JWT access tokens support immediate revocation, where these periodic checks would be useful.