MIME-Version: 1.0
References: 
 <CAOYmi+=WA4ZfyHWt+4=yFV7VAXQWvNKsn4R=3PwLd4GfmSTiBA@mail.gmail.com>
 <aAkXb1wdZUDycyWi@msg.df7cb.de>
 <CAOYmi+=cs+gDTAH0L+3JzpRLeHPOXDQxu7MOfsbjah9SkAP_kw@mail.gmail.com>
 <CAOYmi+=UsSnLM4K+hYkhrezpQROQ5jr=72feAkQ0Te8GJf3Fbg@mail.gmail.com>
 <8210C830-DDBB-4CD7-AB39-F5F59C36D547@yesql.se>
 <CAOYmi+mXoq9dUagnkXDgWa72QjCg8SdagBz_yGPUdh1Px0XD5g@mail.gmail.com>
 <FE299814-66B2-47B4-8F06-2B6A7AB508EF@yesql.se>
 <CAOYmi+nF+ov5JxLrLuL6z3Zj7ng3-yJbv0AQFH8VpZm-DNDYUg@mail.gmail.com>
 <CAOYmi+kSX0bdXXSYfv0De6rTx1d77KJAYoHA7+9fmJ64z5dOjw@mail.gmail.com>
 <CAOYmi+kQCDY8+8URaUpYuwyYQuSqj8Woc=02N_tCk-YK7XC-qw@mail.gmail.com>
 <aBTgjDfrdOZmaPgv@nathan>
 <CAOYmi+=CgA=RfvhcKgT6k+G=tFBi0BFk1gWsi6jAZ9dSYV0auQ@mail.gmail.com>
 <CAOYmi+mjsgLkqPzg66h0VmYrnUQrxntYccpx1ubL-ykxRDu6zA@mail.gmail.com>
 <CAOYmi+=pwswyjjXUiL-ej2eUiHxPPWx9u9AZimSmZu3kA2REAA@mail.gmail.com>
 <9badbeeb-a432-48d4-8710-c8254a54d428@technowledgy.de>
In-Reply-To: <9badbeeb-a432-48d4-8710-c8254a54d428@technowledgy.de>
From: Jacob Champion <jacob.champion@enterprisedb.com>
Date: Tue, 6 May 2025 10:49:31 -0700
Message-ID: 
 <CAOYmi+=H+Sp5KuJaf=K296BrbnT3b5AvHsUzaGXhwreX37JZfg@mail.gmail.com>
Subject: Re: [PoC] Federated Authn/z with OAUTHBEARER
To: Wolfgang Walther <walther@technowledgy.de>
Cc: Nathan Bossart <nathandbossart@gmail.com>,
 Daniel Gustafsson <daniel@yesql.se>,
	Christoph Berg <myon@debian.org>, Jelte Fennema-Nio <postgres@jeltef.nl>,
	Peter Eisentraut <peter@eisentraut.org>, Andres Freund <andres@anarazel.de>,
 Tom Lane <tgl@sss.pgh.pa.us>,
	Bruce Momjian <bruce@momjian.us>,
 PostgreSQL Hackers <pgsql-hackers@postgresql.org>,
	Thomas Munro <thomas.munro@gmail.com>,
 Nazir Bilal Yavuz <byavuz81@gmail.com>,
	Antonin Houska <ah@cybertec.at>,
 =?UTF-8?B?RGV2cmltIEfDvG5kw7x6?= <devrim@gunduz.org>
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Archived-At: 
 <https://www.postgresql.org/message-id/CAOYmi%2B%3DH%2BSp5KuJaf%3DK296BrbnT3b5AvHsUzaGXhwreX37JZfg%40mail.gmail.com>
Precedence: bulk

On Sun, May 4, 2025 at 5:58=E2=80=AFAM Wolfgang Walther <walther@technowled=
gy.de> wrote:
> The only inconsistency I was able to find is the autoconf-generated
> libpq.pc file, which has this:
>
>    Requires.private: libssl, libcrypto libcurl

Oh, I see what I did. Will fix, thanks.

> I was only able to test the latter in an end-to-end fully static build
> of a downstream dependency - works great. The final executable has all
> the expected oauth strings in it.

Thank you so much for all the detailed testing!

--Jacob