Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1tu8pV-0042Ce-03 for pgsql-hackers@arkaria.postgresql.org; Mon, 17 Mar 2025 11:40:25 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.94.2) (envelope-from ) id 1tu8pT-00BTdQ-KH for pgsql-hackers@arkaria.postgresql.org; Mon, 17 Mar 2025 11:40:23 +0000 Received: from magus.postgresql.org ([2a02:c0:301:0:ffff::29]) by malur.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1tu8mF-00BNkm-Cl for pgsql-hackers@lists.postgresql.org; Mon, 17 Mar 2025 11:37:03 +0000 Received: from mail-pl1-x629.google.com ([2607:f8b0:4864:20::629]) by magus.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (Exim 4.96) (envelope-from ) id 1tu8mB-003MJU-2y for pgsql-hackers@postgresql.org; Mon, 17 Mar 2025 11:37:02 +0000 Received: by mail-pl1-x629.google.com with SMTP id d9443c01a7336-22359001f1aso28387555ad.3 for ; Mon, 17 Mar 2025 04:37:01 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1742211419; x=1742816219; darn=postgresql.org; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:from:to:cc:subject:date:message-id:reply-to; bh=cEo06r4MBMWtc94GsyhpHWGqy7BFpc0E00VBx0W/TGE=; b=O6VbcslMEylan4z/yZxRMA4bfDqf3Yg4hvBm0ioz7siUUTq2P9lOaryNp+t/ro71ah rcgT7DKMDSZNaZ2C9zIYNxhIg/JmJsMZBnThAPKwyLl3RSgfM/xRAAmz+IDaWLvdudK+ NZ0JdDgmJWLyELvTAeNZMZ6SqBddnUmAyd6HqBHTuZu6gSP6oBm3TYZT0wxKovbnXW0i 7J/q4pQaftVRnqch04jCMUZXMkBA3cl+NZ9hjm4eCEG+XKpF5FdE92MFL/jsbjdJsMKU hg2KiWrfjroeCTaJWfwP6tX9ozhJ7957J2mq0NASIhvna1ivg6JKFS2RbQXbBI9hEoZK kjfw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1742211419; x=1742816219; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to; bh=cEo06r4MBMWtc94GsyhpHWGqy7BFpc0E00VBx0W/TGE=; b=iwEhp0nBlX/OWe9xZxXCYe2t5QcfMf5G1a8iI9ZVGyOpcQH+14m6MJK/buLMyMUJu5 PPcwvHH5ubqK/cwsPGH73V1vvbkCgktPhf4tIxHT1JCTmK3NPzvO612P4m/9xvo9GUeR wMiYcHkC0Y3wsmAihSkQEdAWXxst3tNipq5GIcX6QNwhDeA2POxWPYHko4uAg1C5xnZz Cot4ZG1YKt2wbtm3FhGlhFwLcO/DfdNRn95Xgjl3s5xACnWoUr6dY/7ofs2py+COHIRM H8uMdUcj8aCmkv8sAejm0VGId2cHH9Wxn4nXkQehMTCjZOpzZRT/QrdsDu/y1mLW0I8x GyIg== X-Forwarded-Encrypted: i=1; AJvYcCVctvEeCHY7fm0NTDZfXlB3y0Rejqg0KG3TGMooDarnE+uEE/33W0BqiwKWPJ877wKpxTwplH8jGLEcxRvr@postgresql.org X-Gm-Message-State: AOJu0YwokN5RLDUIFAj1Wgw5zgHFqWN9Vi8PjDvxtcmChLiDkM4LhHYZ heFKSf3uMe3k9ZpAWBRMRLLSLqUfplUnIw0TZM2rirB7ysdNK7w5rRyjJW1lTCithgR+kwOvPPF zMRfrWoPA/FehC7Ew1VNa6kSYqII= X-Gm-Gg: ASbGncuBiqEXsg2HZ9ZlOdTezvokKgUNi0MTqrrKPpXCwhBbtGlB72hGtXCocXS8edv K9GH14aggx4AJpgGPDI1l7TIhZLn95N4fPGkh5zoCJQJv/wsvEYeuHo8/HEXTS60TKNl4EfvQF5 ljV2gMSiRmVd8G7uKAYhe2HgAaJA== X-Google-Smtp-Source: AGHT+IFf2WBL98mAPEzL7I4hpdtTfEEmbkX6cQUsljBgLTimMtB6tluUqMIeTsyxOxafjZQxXq6YnBLfe3FD6DXllRs= X-Received: by 2002:a17:902:c411:b0:220:ff3f:6cba with SMTP id d9443c01a7336-225e0ae70b8mr143764535ad.38.1742211419200; Mon, 17 Mar 2025 04:36:59 -0700 (PDT) MIME-Version: 1.0 References: <83C44AB4-24B0-437F-B139-B5CBC5821BB1@yesql.se> <2A1511A0-C04B-47E4-B1C3-54C2A1C765B8@yesql.se> <13F329B6-86BC-40A5-96F4-102784A0357A@yesql.se> In-Reply-To: From: Nazir Bilal Yavuz Date: Mon, 17 Mar 2025 14:36:46 +0300 X-Gm-Features: AQ5f1JpHJvrQiAxiMwC42oxGRfD9Pn5JMqhTbuNE_C_Fhy_ZYa925AF2rr3ZHjw Message-ID: Subject: Re: [PoC] Federated Authn/z with OAUTHBEARER To: Jacob Champion Cc: Thomas Munro , Andres Freund , Daniel Gustafsson , Peter Eisentraut , Antonin Houska , PostgreSQL Hackers Content-Type: text/plain; charset="UTF-8" List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Archived-At: Precedence: bulk Hi, I just wanted to report that the 'oauth_validator/t/001_server.pl' test failed on FreeBSD in one of my local CI runs [1]. I looked at the thread but could not find the same error report; if this is already known, please excuse me. HEAD was at 3943f5cff6 and there were no other changes. Sharing the failure here for visibility: [11:09:56.548] stderr: [11:09:56.548] # Failed test 'stress-async: stdout matches' [11:09:56.548] # at /tmp/cirrus-ci-build/src/test/modules/oauth_validator/t/001_server.pl line 409. [11:09:56.548] # '' [11:09:56.548] # doesn't match '(?^:connection succeeded)' [11:09:56.548] # Failed test 'stress-async: stderr matches' [11:09:56.548] # at /tmp/cirrus-ci-build/src/test/modules/oauth_validator/t/001_server.pl line 410. [11:09:56.548] # '[libcurl] * Host localhost:39251 was resolved. [11:09:56.548] # [libcurl] * IPv6: ::1 [11:09:56.548] # [libcurl] * IPv4: 127.0.0.1 [11:09:56.548] # [libcurl] * Trying [::1]:39251... [11:09:56.548] # [libcurl] * Immediate connect fail for ::1: Connection refused [11:09:56.548] # [libcurl] * Trying 127.0.0.1:39251... [11:09:56.548] # [libcurl] * Connected to localhost (127.0.0.1) port 39251 [11:09:56.548] # [libcurl] * using HTTP/1.x [11:09:56.548] # [libcurl] > GET /param/.well-known/openid-configuration HTTP/1.1 [11:09:56.548] # [libcurl] > Host: localhost:39251 [11:09:56.548] # [libcurl] > [11:09:56.548] # [libcurl] * Request completely sent off [11:09:56.548] # [libcurl] * HTTP 1.0, assume close after body [11:09:56.548] # [libcurl] < HTTP/1.0 200 OK [11:09:56.548] # [libcurl] < Server: BaseHTTP/0.6 Python/3.11.11 [11:09:56.548] # [libcurl] < Date: Mon, 17 Mar 2025 11:09:55 GMT [11:09:56.548] # [libcurl] < Content-Type: application/json [11:09:56.548] # [libcurl] < Content-Length: 400 [11:09:56.548] # [libcurl] < [11:09:56.548] # [libcurl] < {"issuer": "http://localhost:39251/param", "token_endpoint": "http://localhost:39251/param/token", "device_authorization_endpoint": "http://localhost:39251/param/authorize", "response_types_supported": ["token"], "subject_types_supported": ["public"], "id_token_signing_alg_values_supported": ["RS256"], "grant_types_supported": ["authorization_code", "urn:ietf:params:oauth:grant-type:device_code"]} [11:09:56.548] # [libcurl] * shutting down connection #0 [11:09:56.548] # [libcurl] * Hostname localhost was found in DNS cache [11:09:56.548] # [libcurl] * Trying [::1]:39251... [11:09:56.548] # [libcurl] * Immediate connect fail for ::1: Connection refused [11:09:56.548] # [libcurl] * Trying 127.0.0.1:39251... [11:09:56.548] # [libcurl] * Connected to localhost (127.0.0.1) port 39251 [11:09:56.548] # [libcurl] * using HTTP/1.x [11:09:56.548] # [libcurl] > POST /param/authorize HTTP/1.1 [11:09:56.548] # [libcurl] > Host: localhost:39251 [11:09:56.548] # [libcurl] > Content-Length: 92 [11:09:56.548] # [libcurl] > Content-Type: application/x-www-form-urlencoded [11:09:56.548] # [libcurl] > [11:09:56.548] # [libcurl] > scope=openid+postgres&client_id=eyJpbnRlcnZhbCI6MSwicmV0cmllcyI6MSwic3RhZ2UiOiJhbGwifQ%3D%3D [11:09:56.548] # [libcurl] * upload completely sent off: 92 bytes [11:09:56.548] # [libcurl] * HTTP 1.0, assume close after body [11:09:56.548] # [libcurl] < HTTP/1.0 200 OK [11:09:56.548] # [libcurl] < Server: BaseHTTP/0.6 Python/3.11.11 [11:09:56.548] # [libcurl] < Date: Mon, 17 Mar 2025 11:09:55 GMT [11:09:56.548] # [libcurl] < Content-Type: application/json [11:09:56.548] # [libcurl] < Content-Length: 132 [11:09:56.548] # [libcurl] < [11:09:56.548] # [libcurl] < {"device_code": "postgres", "user_code": "postgresuser", "verification_uri": "https://example.com/", "expires_in": 5, "interval": 1} [11:09:56.548] # [libcurl] * shutting down connection #1 [11:09:56.548] # [libcurl] * Hostname localhost was found in DNS cache [11:09:56.548] # [libcurl] * Trying [::1]:39251... [11:09:56.548] # [libcurl] * Connected to localhost (::1) port 39251 [11:09:56.548] # [libcurl] * using HTTP/1.x [11:09:56.548] # [libcurl] > POST /param/token HTTP/1.1 [11:09:56.548] # [libcurl] > Host: localhost:39251 [11:09:56.548] # [libcurl] > Content-Length: 157 [11:09:56.548] # [libcurl] > Content-Type: application/x-www-form-urlencoded [11:09:56.548] # [libcurl] > [11:09:56.548] # [libcurl] > device_code=postgres&grant_type=urn%3Aietf%3Aparams%3Aoauth%3Agrant-type%3Adevice_code&client_id=eyJpbnRlcnZhbCI6MSwicmV0cmllcyI6MSwic3RhZ2UiOiJhbGwifQ%3D%3D [11:09:56.548] # [libcurl] * upload completely sent off: 157 bytes [11:09:56.548] # [libcurl] * Received HTTP/0.9 when not allowed [11:09:56.548] # [libcurl] * closing connection #2 [11:09:56.548] # connection to database failed: connection to server on socket "/tmp/xZKYtq40nL/.s.PGSQL.21400" failed: failed to obtain access token: Unsupported protocol (libcurl: Received HTTP/0.9 when not allowed) [11:09:56.548] # ' [11:09:56.548] # matches '(?^:connection to database failed)' [11:09:56.548] # Looks like you failed 2 tests of 121. [11:09:56.548] [11:09:56.548] (test program exited with status code 2) [1] https://cirrus-ci.com/task/4621590844932096 -- Regards, Nazir Bilal Yavuz Microsoft