Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1u6wDR-0089Cv-Q0 for pgsql-hackers@arkaria.postgresql.org; Mon, 21 Apr 2025 18:50:02 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.94.2) (envelope-from ) id 1u6wDP-007l6R-Ql for pgsql-hackers@arkaria.postgresql.org; Mon, 21 Apr 2025 18:50:00 +0000 Received: from magus.postgresql.org ([2a02:c0:301:0:ffff::29]) by malur.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1u6wDP-007l6J-GL for pgsql-hackers@lists.postgresql.org; Mon, 21 Apr 2025 18:50:00 +0000 Received: from ns7.gunduz.org ([165.232.104.158]) by magus.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1u6wDN-001H2K-0b for pgsql-hackers@postgresql.org; Mon, 21 Apr 2025 18:49:59 +0000 Received: from dell-laptop07.gunduz.org (unknown [85.106.91.224]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by ns7.gunduz.org (Postfix) with ESMTPSA id DED9330002CC; Mon, 21 Apr 2025 18:49:55 +0000 (UTC) Message-ID: Subject: Re: [PoC] Federated Authn/z with OAUTHBEARER From: Devrim =?ISO-8859-1?Q?G=FCnd=FCz?= To: Christoph Berg , Jacob Champion , Jelte Fennema-Nio , Peter Eisentraut , Andres Freund , Tom Lane , Bruce Momjian , PostgreSQL Hackers , Daniel Gustafsson , Thomas Munro , Nazir Bilal Yavuz , Antonin Houska , Wolfgang Walther Date: Mon, 21 Apr 2025 21:49:53 +0300 In-Reply-To: References: Autocrypt: addr=devrim@gunduz.org; prefer-encrypt=mutual; keydata=mQINBFN+TjkBEAC6pudhV1V54kHPe91nr6Erz6VuG93VKfcHOHN86yET35s8ytey7f//m 93mW0X6LJUMbY+Z0BztU4EauGAhYRSFzpBWUVBCxaaSyB+l0FR6WtH/Lv6Sxql0GLs6Uhxsk2v3jJ tMtk+hFAW2TJInW0ab1xxwTiiHFmSnJOBEK7IMlOOu5kfOAILgGOgiyMUPsDf5iTIJ35iX9hqFvmz MueFVwAExTeTkKCRXvuGXrO28Bbesy6h4GbJe1bUaTwTMEBn90oQD20UUKI9Lvo46c1SkqF1nOSoQ A3A2eBjWACq68DQ9Q8TbtkBlL8QKftrFz3SL0jth9ZpxyYfm+jiZ5LEAd717YM7qjvH5Yq0juZO3U jz2L9RVgyIF1lTQ33fQEuGn797n7LxdaQSdOYK88yrpABic6fJs6rxGy86HcNVHJQCfxgu+uU4eG9 /wzBKllXreabD2JJXIRjqvhJTXd7JWaF6TZUEUM0SH2GlA6I2G2vGSyRoe0/jaqUIDGm5drzFGkrK 7CwhWzLqxSBlVkCelhOVfDuyit3ypwPhsztTOgZ9w3iwnAPZWuqXbys2Z26H9hQb5eG7xlkCZwlSr mD8mUdHlU5DP84VPIXX6mGCh0I4EJ4ur61CNESpv86BKfGUpbl/3x9XSmcWfvdxB4JnrjHBm9aDIQ ZzukEJGdiGBpQARAQABtCNEZXZyaW0gR8O8bmTDvHogPGRldnJpbUBndW5kdXoub3JnPokCOQQTAQ IAIwUCU35OOQIbAwcLCQgHAwIBBhUIAgkKCwQWAgMBAh4BAheAAAoJENjDPf6Sz261pAgP/j4OJd8 EfBLcdkeYyWKNVV3xN6KGF5tTo5iLjjIBmxmj7403DoigD4qfXY8UQ1hG1e0vTe+zaBuL+fMmn3Rg SAcUcjNUjVwcOeGFIMO0uMDX4xnMeAahjuc+2EKBFBW0UY21aH6BdmM98GkU/gyBpaMt/MC+5Xgsj 1koqlA9vCj1bnDXVNP7w/MPhVsEGbhkBZFB/vwVDVJ0J1U4vA1pr2ggUGOOv0kXu7r7B7nGQgcxN8 qh8QBgfP4ePzbubdA3oGY3PTmRjWWDAzA7HpnKD9pPiAFxvhmnUVcOCdTCo9mNaJc+kRXP7yGbsQa rOWvLMtCvKa0DjFJ6SDY45h3g1XF+Xp/ZMZLbJ7xNc3zEVnBZc0AIvGL+IlQbo9trPdJvjdrFATio UV/cLxug1p4kl8JB6YMvToiKFmMlpQv2wcKK63bm01lDjU93sAy8oZpeKYlOYlN9D0WmyhJbFTlTl IJhMX0aY/xfxUaMYJC5DxV+9s18uviqGWDb2zQR3i3qUbfzV27yHnKo194rUblZ128CzAjs32NerE CLJjKEpc2Ci14fJZz6c6P0J5JTONBKhAzygQi/l97RGBqsLiniJIsTUjGH+hEr7hTnhEg/ZOQSs32 h9vVjhQB7WJ9Xg9A3Frw5mD+W3YkMMM4bFryLTM5p7E1iwGlx+XeM8UMzhtYt Content-Type: multipart/signed; micalg="pgp-sha512"; protocol="application/pgp-signature"; boundary="=-UpWoitlP1nAJg/ZWCOQx" User-Agent: Evolution 3.56.1 (3.56.1-1.fc42) MIME-Version: 1.0 List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Archived-At: Precedence: bulk --=-UpWoitlP1nAJg/ZWCOQx Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Hi, On Sat, 2025-04-19 at 14:03 +0200, Christoph Berg wrote: > =C2=A0 No libpq OAuth flows are available. (Try installing the libpq-oaut= h > package.) >=20 > People who have custom flows will likely know that they have to do > anyway. >=20 > Devrim: Does that match the package name you'd use? On PGDG RPM world it would be libpq5-oauth -- but I need to read the whole thread first as I don't know yet why we need to split out oauth into a separate package (at least in the RPM world) Regards, --=20 Devrim G=C3=BCnd=C3=BCz Open Source Solution Architect, PostgreSQL Major Contributor BlueSky: @devrim.gunduz.org , @gunduz.org --=-UpWoitlP1nAJg/ZWCOQx Content-Type: application/pgp-signature; name="signature.asc" Content-Description: This is a digitally signed message part -----BEGIN PGP SIGNATURE----- iQJGBAABCgAwFiEEH8GKHNUOKtDEiyD22MM9/pLPbrUFAmgGk1ESHGRldnJpbUBn dW5kdXoub3JnAAoJENjDPf6Sz261bkYP/RjATXdoH9uIQfKNZGR7aWNyjDIyvrOr V7PfFt9akYzSBV33zgJxIEfGBowf4pHBXurEvY3Xr4k18Rl6Z7aY9lKRTHltr6qL 5rxtm65/OhbtNyFcOJUI22D3/NqpUK0qTxXcDQP4uHbJbOnllavM/VAnWB1ZyQcg e2uCGYqE0SY5NZ1CZwUj5AZ2IH0A3D1moT18OmDuyEumyF8jUq+5N2+lCFdwAMsN S14mCRO1r8piCYjppJp6VahKhuDfFhFP8/CK/ZGlXs8tEtk9ADDrDg1gMgQ2btO0 n2nw10fgK9iRHlmOWBbZfAkPyZukM8jUfrs45XyE1+ydAqEsF7p3/1Rt+cLn0U6P EwTbRQ/iycIpUUr4ZTClVVnLRInGxpqdfsheoaCWz6FDFQfsLwqu7yejvjurWFEI 2y7iYM+xIHp2Pb4BpNn8gsyhIty2mZJyYyN9+W0UYb9eHnkRM0C/sz1PwAW59g7U 1HqTMwHIA15dkED9KP8w+QXF0ARFLOP8QTCzAVD8HjJj1RgjsyaPjUJbyhcunlAd sHggGn/1itFZ3BYT458/GoV+ehWUIND2tO2T6aTSZXOdmw2hV1o9jqwz6ZGYc77o HzZDvRDzu9/bgNSq8XiirKio41sITnwwyn8HxPXM9y4X19Bl0DNLfcFz0atcjg7s 9goaTkLdCbPH =ikDx -----END PGP SIGNATURE----- --=-UpWoitlP1nAJg/ZWCOQx--