Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1vVnwy-008GBy-2E for pgsql-hackers@arkaria.postgresql.org; Wed, 17 Dec 2025 09:36:05 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.96) (envelope-from ) id 1vVnwx-00BlP6-0u for pgsql-hackers@arkaria.postgresql.org; Wed, 17 Dec 2025 09:36:04 +0000 Received: from makus.postgresql.org ([2001:4800:3e1:1::229]) by malur.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1vVnwx-00BlOy-00 for pgsql-hackers@lists.postgresql.org; Wed, 17 Dec 2025 09:36:03 +0000 Received: from mail-yw1-x1132.google.com ([2607:f8b0:4864:20::1132]) by makus.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (Exim 4.96) (envelope-from ) id 1vVnww-0017hC-0s for pgsql-hackers@lists.postgresql.org; Wed, 17 Dec 2025 09:36:02 +0000 Received: by mail-yw1-x1132.google.com with SMTP id 00721157ae682-78e765f9997so30332487b3.1 for ; Wed, 17 Dec 2025 01:36:01 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=percona.com; s=google; t=1765964161; x=1766568961; darn=lists.postgresql.org; h=content-transfer-encoding:cc:to:subject:message-id:date:from :in-reply-to:references:mime-version:from:to:cc:subject:date :message-id:reply-to; bh=irHQi4VdMIz70ReB4yFAfqH4bM6wS+e2wfEIvpgqrgw=; b=Qi8hVe0o3J1/lkOgae7o3avTJc5ME5ayt4eP49FYwdkGYylOWf5ZMskK8H9hDkitRo x4fmS6H95qu4teEHWkPgANRH5R0J6aMct0z6GoPFezuy4+OtyI5g+0SNKZ4MGQfc2COI fTXLkTzN7lduX8ellK1XAhY/BJOi5F/fd9N0k= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1765964161; x=1766568961; h=content-transfer-encoding:cc:to:subject:message-id:date:from :in-reply-to:references:mime-version:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to; bh=irHQi4VdMIz70ReB4yFAfqH4bM6wS+e2wfEIvpgqrgw=; b=HbBgnRfOS3A64/bTIgafmwGQsS9ifMr4B1qg83K3MJcYdy4i//cuwA5LFaWyrac/gB P7C/04dOP+6p7mcsfLPipKTh4lwf5We60hlHegroDl2jvnruZiEG0I3W50fgsxpc+qgZ nVt3ZNyo4Hr1Fw9ClpO75UnSgIOf0zFKq4o5+i0NMPeu0P0KZFhfT0jG2GgV6oh6dyLa RpKrtrGWpT4T+wGcjcgx/h7luy4izFuzG32x6KiS4/x1TCky1XdsCnPZMbaPpbfbHGUe 8l9Z9zccc5eApViwuRr1fc+xjavumEGl7kwk6QnMCHKm2pZd+WbGpyOLF5z8mXsCpNlQ wV3w== X-Gm-Message-State: AOJu0YwGAUOfv7B70WG0rkQsbgBu5/MVGA1P/Lkh0zlMuRvmEPn3tLK6 bJofWgBZF9l6IILrwq/shJRcvDFt55CYLINxtwBaT8+7KX+f3kkPbdCNvOqI0JqsdtudqleHaqb zJg7g7PGWIAb+IaDtV5iz9HvEIPQpR0jmOn61Dj0JBaMDDS+ZUzHOmNikpBpANpdtSITWxWmOCX +JOZfQBxV41X0DHlazi82RJRiKGevJRZwKqyXWwYIAS/Vj5oGsYdDQDuwCFytSQ/Jeb1c5Qdn90 frEC3LWHuulW4b0J5qPUFRD0XyAln42DaPsXTYvb4LLmmXPuAHjBMzWck0NwUzIRBM= X-Gm-Gg: AY/fxX7dOQ4rhUHgAPgYLXlaUjruqEELCGIxgaNKSGNArxpHfUdSiX8S7sB+MTv/M9f hoxBcmpxPDokFZxC+B54Gtee6pKiIrjTwOzNCyDQXBfmSAGamT7jrba9NYDLOdf+IPUFScldZwd EsVjhh2ctpanwRzQzz8NzkU9BMmvxBXkzPsyjdAlxXDmFGRGOQRT7pbwFeMioMdBbCb1x7jv8vQ abs/8tPH93q07xkQDA7YvzpWe9hoNK9EvbHvpH97OZhZTSe5OfhM8xApzOiwMlJyFoubpPJ/0gk SI7PIxL0vHe/lfpyDPnYINJNzA3o0TU0vXB0+6XVXBR1yC67btaY/8Ln X-Google-Smtp-Source: AGHT+IEJhJUr8pDEDCRyHkcPo83L5Zn8DGtMige+Lz5SD8XL2aRmUOoSqUReBv+/ScnSE9YAJ6xcM/tBzv+FisM+6/o= X-Received: by 2002:a05:690c:6ac5:b0:788:1b67:d741 with SMTP id 00721157ae682-78e6694fc59mr141984217b3.3.1765964161272; Wed, 17 Dec 2025 01:36:01 -0800 (PST) MIME-Version: 1.0 References: In-Reply-To: From: Zsolt Parragi Date: Wed, 17 Dec 2025 09:35:51 +0000 X-Gm-Features: AQt7F2oiiwZmI0ph5JPzKuGZi8Skx1kR51kDQPSM2D-UJZMXSzekZ9thl3wGwGY Message-ID: Subject: Re: Custom oauth validator options To: VASUKI M Cc: PostgreSQL Hackers , jacob.champion@enterprisedb.com, david.g.johnston@gmail.com, Robert Haas , myon@debian.org Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable X-CLOUD-SEC-AV-Sent: true X-CLOUD-SEC-AV-Info: percona,google_mail,monitor X-Gm-Spam: 0 X-Gm-Phishy: 0 List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Archived-At: Precedence: bulk > Overall, +1 that this limitation is real and worth discussing.I=E2=80=99l= l plan to send a patch shortly exploring option (b). Personally I would go with either (a) or (c), and I was planning to clean up / improve / share my (c) patch as a second attempt for this thread, if it didn't receive any replies. I can still do that, so that we have multiple test implementations. (b) seemed a not as nice design to me, but maybe you find a better way to implement it than I did. Also now I really like the idea of the PGC_HBA, if there's a way for users to configure it without depending on line numbers or other easy-to-change details.