Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1uC1pe-009bOC-HE for pgsql-hackers@arkaria.postgresql.org; Mon, 05 May 2025 19:50:30 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.94.2) (envelope-from ) id 1uC1iI-005KhW-8n for pgsql-hackers@arkaria.postgresql.org; Mon, 05 May 2025 19:42:54 +0000 Received: from makus.postgresql.org ([2001:4800:3e1:1::229]) by malur.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1uC1iH-005KhO-VT for pgsql-hackers@lists.postgresql.org; Mon, 05 May 2025 19:42:53 +0000 Received: from momjian.us ([72.94.173.45]) by makus.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1uC1iE-000JKi-1t for pgsql-hackers@lists.postgresql.org; Mon, 05 May 2025 19:42:53 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=momjian.us; s=2025010100; h=In-Reply-To:Content-Transfer-Encoding:Content-Type: MIME-Version:References:Message-ID:Subject:Cc:To:From:Date:Sender:Reply-To: Content-ID:Content-Description; bh=xYLH8MX5IAjE6MeMvuOdfv4Y+gOxqVkWlmwFpI/l8fI=; b=MvNJczHWe8t1B7cse426L5WiZu hnhNFzgjeIBnhtvE0cN75Ck/Uh5zjSiLdN0kkdUqjLxTWaZgPu0RYUaeEpkYtqEYi/jjs317PXqX2 udWtLlF4hPnJSVX+uP/wxFRwLmE0nNoRrn0mBYQjRMGycRj1lrjcNlRffkNosU/wFRu2Yy6PRP9vZ hoa54NR9H/TgubPr/SUF0dOuSZHHvHiCs/ORyc5V2h2jrURG5HlXbKVXNEcn0rVaXctO75ehqi2ba FqaDDwUyQgoC235dEEyG+x7vIaukrOWe4Rn5oUeeD1FUaJ6OTeK/F5gn3sH4SurDjz0rMYKnKVmxr xqs9JmRg==; Received: from bruce by momjian.us with local (Exim 4.96) (envelope-from ) id 1uC1iE-00HaYt-0W; Mon, 05 May 2025 15:42:50 -0400 Date: Mon, 5 May 2025 15:42:50 -0400 From: Bruce Momjian To: Jacob Champion Cc: PostgreSQL-development Subject: Re: PG 18 release notes draft committed Message-ID: References: MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="z7/FVZto2s46F0cS" Content-Disposition: inline Content-Transfer-Encoding: 8bit In-Reply-To: List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Archived-At: Precedence: bulk --z7/FVZto2s46F0cS Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: 8bit On Mon, May 5, 2025 at 12:20:15PM -0700, Jacob Champion wrote: > On Thu, May 1, 2025 at 7:44 PM Bruce Momjian wrote: > > https://momjian.us/pgsql_docs/release-18.html > > > +Add support for the "oauth" authentication (Jacob Champion, Daniel Gustafsson, Thomas Munro) > > Should be either 'support for "oauth" authentication' or 'support for > the "oauth" authentication method', I think. Okay. > > +This adds an "oauth" authentication method to pg_hba.conf, a server variable oauth_validator_libraries to specify OAUTH libraries, a configure flag --with-libcurl to add the required > > +compile-time libraries, and libpq OAUTH options. > > Maybe the description of oauth_validator_libraries could be something > like "to load token validation modules"? Done. > Also, "OAUTH" should just be "OAuth". We should probably lock in the > capitalization: > > - "OAuth" is the name of the framework we're using > - "oauth" is the HBA method name in the configs > - "OAUTHBEARER" is the internal name of the SASL method, which most > users don't care about and should only rarely appear in the docs Capitalization changed, patch attached. -- Bruce Momjian https://momjian.us EDB https://enterprisedb.com Do not let urgent matters crowd out time for investment in the future. --z7/FVZto2s46F0cS Content-Type: text/x-diff; charset=us-ascii Content-Disposition: attachment; filename="master.diff" diff --git a/doc/src/sgml/release-18.sgml b/doc/src/sgml/release-18.sgml index 2fda2b94964..9a6e4fb8d0e 100644 --- a/doc/src/sgml/release-18.sgml +++ b/doc/src/sgml/release-18.sgml @@ -1087,13 +1087,13 @@ Author: Daniel Gustafsson -Add support for the "oauth" authentication (Jacob Champion, Daniel Gustafsson, Thomas Munro) +Add support for the OAuth authentication method (Jacob Champion, Daniel Gustafsson, Thomas Munro) § -This adds an "oauth" authentication method to pg_hba.conf, a server variable oauth_validator_libraries to specify OAUTH libraries, a configure flag --with-libcurl to add the required -compile-time libraries, and libpq OAUTH options. +This adds an "oauth" authentication method to pg_hba.conf, libpq OAuth options, a server variable oauth_validator_libraries to load token validation libraries, and +a configure flag --with-libcurl to add the required compile-time libraries. --z7/FVZto2s46F0cS--