Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1uWyji-0049ZT-7l for pgsql-hackers@arkaria.postgresql.org; Wed, 02 Jul 2025 14:46:58 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.94.2) (envelope-from ) id 1uWyjg-002RK1-9j for pgsql-hackers@arkaria.postgresql.org; Wed, 02 Jul 2025 14:46:56 +0000 Received: from magus.postgresql.org ([2a02:c0:301:0:ffff::29]) by malur.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1uWyjf-002RJB-Ur for pgsql-hackers@lists.postgresql.org; Wed, 02 Jul 2025 14:46:56 +0000 Received: from mail-qv1-xf33.google.com ([2607:f8b0:4864:20::f33]) by magus.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (Exim 4.96) (envelope-from ) id 1uWyjd-005K4S-2i for pgsql-hackers@postgresql.org; Wed, 02 Jul 2025 14:46:55 +0000 Received: by mail-qv1-xf33.google.com with SMTP id 6a1803df08f44-701046cfeefso49201716d6.2 for ; Wed, 02 Jul 2025 07:46:52 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=enterprisedb.com; s=google; t=1751467611; x=1752072411; darn=postgresql.org; h=content-transfer-encoding:cc:to:subject:message-id:date:from :in-reply-to:references:mime-version:from:to:cc:subject:date :message-id:reply-to; bh=l3ZeViC3mwM9rVOLZKAcJOvbHmR78w7MvKEsnctLNvc=; b=Yvrs7aU9LZSvA61apX4BS/9Hhi58X3LsG1CdKlZdwJj1PCNCPQvpq6JI8NryDIBoVP +ECPvPCfXFs6ZMgThNPnQxE95UDWkQepYu5Z7eWgIoAglFw8dHzEFHlJ1R9UiPfGcipR EAs2eE+9uPkpJY2mTq/LrYLCwdtJ1Pl3tThH9wDJQds0mKnFBTgPeIIRI88NA4hKQ5sa bpMxHQklBsk7QGDPareqshSrCYJ0s71UUEEwHVU6GELrLT/09cKFiVmaadk7Erd12SOY Epi1U/2f3Zp8tP/hFUgMW6RsZsMDooN70oG8t0NtoeemJGz3WP5yfrmEoSREfUBe1Jd/ iKLw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1751467611; x=1752072411; h=content-transfer-encoding:cc:to:subject:message-id:date:from :in-reply-to:references:mime-version:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=l3ZeViC3mwM9rVOLZKAcJOvbHmR78w7MvKEsnctLNvc=; b=Ihd+XDakQ2yB+5q2nW10j0A5HOQbN2uBeI2WQItrF21YwyGuanmr63RgM9pbU/+Tvu NN5oG1X05suWCNgvyA2fay0N7exkeeD/JEgGxHj/aRdzbTggrI4aWMMJvDeiuzzb1bkw SGgA8wttcCnr4XmDnQ0eixaDK0fREgFUrkXQZ8DA2axAe3e10Irm9jI5kLx23Mvisnmn pHeddJoubA7bGhn2WxeFXIUwsSXuGHp1PA9rkrQ8CT+fzcSO4z+sE1bl4yOBtXVVcinm uMcK/5YCsz88j93UzkpQvE8rPCur8toyGbbNi1losdY/uA2L62WeHWMcdw5Wlm/zaNRC KyWw== X-Gm-Message-State: AOJu0YxI94Vn7gPjkaTR+P4euovdunMJV+q698q5U2F8A6WQAF7/vNeX HmjoPKqGtPx4UqrbvBw864jJtpXBh3jwdKEJSxDEQmLZd+e+9iUY6ii2HFvevNeNalU4EFnkecq +YRdSUFvBc2aKhmiL59bHNpILOt1bvY+6FFkis6cwpwuczOswb3ydmg== X-Gm-Gg: ASbGncvBaIUtHfnv3A194jT0mgLZjML/xoAG97CjKvoFU6U4siVxQSR8mwpuCbJwYqD +6hSauzH6sFrXgfzVKNspOiwGEze99V1YtizHjC6QdXIsaVTkBEGI2gOGnZwvDzNVtfkqULCEao 5hm5fOKWb3TM2TsWy1A/Pq5iDI0YrtC99tONOsW0E++OA= X-Google-Smtp-Source: AGHT+IEHky4+U7KnmVUWURKOsGUVR6DwM8GaMGZ6Kb46DrsXVHtKPB8uLfQYyVE48bHV7GREbIy3CDMljoUuULeg/mQ= X-Received: by 2002:a05:6214:2625:b0:6ff:e42d:23f0 with SMTP id 6a1803df08f44-702b1c0fe71mr46884066d6.32.1751467611231; Wed, 02 Jul 2025 07:46:51 -0700 (PDT) MIME-Version: 1.0 References: <83C44AB4-24B0-437F-B139-B5CBC5821BB1@yesql.se> <32e5741d-3dc8-4b15-8c56-cfb26483563c@tantorlabs.com> <8a611028-51a1-408c-b592-832e2e6e1fc9@tantorlabs.com> In-Reply-To: <8a611028-51a1-408c-b592-832e2e6e1fc9@tantorlabs.com> From: Jacob Champion Date: Wed, 2 Jul 2025 07:46:40 -0700 X-Gm-Features: Ac12FXyOzSiNQu0Ah0G-URlly7i7q30fJxMuYZDKkYc9T8iHwUapNxaSAMhUryU Message-ID: Subject: Re: [PoC] Federated Authn/z with OAUTHBEARER To: Ivan Kush Cc: PostgreSQL Hackers , lev.nikolaev@tantorlabs.com Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Archived-At: Precedence: bulk On Wed, Jul 2, 2025 at 5:45=E2=80=AFAM Ivan Kush = wrote: > > Thanks for the clarification! I thought linker flags should be installed > globally for all compilation targets. Not for libcurl, since the libpq-oauth module split. > Another question: > > Why don't we set LIBS in the configure in "checking for curl_multi_init" > using LIBCURL_LIBS or LIBCURL_LDFLAGS? > [...] > Without these LIBCURL... variables we will check a system libcurl, not > our local. Ah, that's definitely a bug. I've tested alternate PKG_CONFIG_PATHs, but I haven't regularly tested on systems that have no system libcurl at all. So those header and lib checks need to be moved after the use of LIBCURL_CPPFLAGS and LIBCURL_LDFLAGS to prevent a false failure. Otherwise they're only useful for the LIBCURL_LDLIBS assignment. I wonder if I should just get rid of those to better match the Meson implementation... but the error messages from the checks will likely be nicer than compilation failures during the later test programs. Hm. (Thanks for the report!) --Jacob