Subject: Re: First draft of PG 19 release notes

From: Andreas Karlsson <[email-masked]>
Date: Fri, 3 Jul 2026 00:12:37 +0200

Hi,

I noticed that some of the OAuth-realted items ended up under the wrong 
sections. See my suggestions below and the attached patch.

Jacob, do you have any opinion here?

= Add a new OAUTH flow hook PQAUTHDATA_OAUTH_BEARER_TOKEN_V2

Should go under "libpq"

= Allow custom OAUTH validators to register custom pg_hba.conf 
authentication options

Should go under "Server Configuration". It could arguably go under 
"Source Code" too but that seems less useful to the reader.

= Allow OAUTH validators to supply failure details

Should go under "Source Code" as this is not user facing.

--
Andreas Karlsson
Percona

From 73684c2832cd652fd055924ff0f3199862714efb Mon Sep 17 00:00:00 2001
From: Andreas Karlsson <[email-masked]>
Date: Fri, 3 Jul 2026 00:01:11 +0200
Subject: [PATCH v1] Move some OAuth related release note items to the right
 section

The two validator items belong under Server Configuration and Source
Code respectively and the one about PQAUTHDATA_OAUTH_BEARER_TOKEN_V2
belongs to libpq.
---
 doc/src/sgml/release-19.sgml | 42 ++++++++++++++++++------------------
 1 file changed, 21 insertions(+), 21 deletions(-)

diff --git a/doc/src/sgml/release-19.sgml b/doc/src/sgml/release-19.sgml
index d8d3758d5ba..194aee056e3 100644
--- a/doc/src/sgml/release-19.sgml
+++ b/doc/src/sgml/release-19.sgml
@@ -1341,20 +1341,29 @@ New configuration file <link linkend="guc-hosts-file"><filename>PGDATA/pg_hosts.
 
 <!--
 Author: Jacob Champion <[email-masked]>
-2026-03-06 [e982331b5] libpq: Introduce PQAUTHDATA_OAUTH_BEARER_TOKEN_V2
+2026-04-07 [b977bd308] oauth: Allow validators to register custom HBA options
+-->
+
+<listitem>
+<para>
+Allow custom <acronym>OAUTH</acronym> validators to register custom <link linkend="auth-pg-hba-conf"><filename>pg_hba.conf</filename></link> authentication options (Jacob Champion)
+<ulink url="&commit_baseurl;b977bd308">&sect;</ulink>
+</para>
+</listitem>
+
+<!--
 Author: Jacob Champion <[email-masked]>
-2026-03-31 [0af4d402c] libpq: Poison the v2 part of a v1 Bearer request
+2026-04-03 [d438a3659] oauth: Let validators provide failure DETAILs
 -->
 
 <listitem>
 <para>
-Add a new <acronym>OAUTH</acronym> flow hook <link linkend="libpq-oauth-authdata-oauth-bearer-token-v2"><literal>PQAUTHDATA_OAUTH_BEARER_TOKEN_V2</literal></link> (Jacob Champion)
-<ulink url="&commit_baseurl;e982331b5">&sect;</ulink>
-<ulink url="&commit_baseurl;0af4d402c">&sect;</ulink>
+Allow <acronym>OAUTH</acronym> validators to supply failure details (Jacob Champion)
+<ulink url="&commit_baseurl;d438a3659">&sect;</ulink>
 </para>
 
 <para>
-This is an improved version of <link linkend="libpq-oauth-authdata-oauth-bearer-token"><literal>PQAUTHDATA_OAUTH_BEARER_TOKEN</literal></link> by adding the issuer identifier and error message specification.
+This is done by setting the <link linkend="oauth-validator-callback-validate"><structname>ValidatorModuleResult</structname></link> structure member error_detail.
 </para>
 </listitem>
 
@@ -2355,29 +2364,20 @@ This can also be set via the <link linkend="libpq-envars"><envar>PGOAUTHCAFILE</
 
 <!--
 Author: Jacob Champion <[email-masked]>
-2026-04-07 [b977bd308] oauth: Allow validators to register custom HBA options
--->
-
-<listitem>
-<para>
-Allow custom <acronym>OAUTH</acronym> validators to register custom <link linkend="auth-pg-hba-conf"><filename>pg_hba.conf</filename></link> authentication options (Jacob Champion)
-<ulink url="&commit_baseurl;b977bd308">&sect;</ulink>
-</para>
-</listitem>
-
-<!--
+2026-03-06 [e982331b5] libpq: Introduce PQAUTHDATA_OAUTH_BEARER_TOKEN_V2
 Author: Jacob Champion <[email-masked]>
-2026-04-03 [d438a3659] oauth: Let validators provide failure DETAILs
+2026-03-31 [0af4d402c] libpq: Poison the v2 part of a v1 Bearer request
 -->
 
 <listitem>
 <para>
-Allow <acronym>OAUTH</acronym> validators to supply failure details (Jacob Champion)
-<ulink url="&commit_baseurl;d438a3659">&sect;</ulink>
+Add a new <acronym>OAUTH</acronym> flow hook <link linkend="libpq-oauth-authdata-oauth-bearer-token-v2"><literal>PQAUTHDATA_OAUTH_BEARER_TOKEN_V2</literal></link> (Jacob Champion)
+<ulink url="&commit_baseurl;e982331b5">&sect;</ulink>
+<ulink url="&commit_baseurl;0af4d402c">&sect;</ulink>
 </para>
 
 <para>
-This is done by setting the <link linkend="oauth-validator-callback-validate"><structname>ValidatorModuleResult</structname></link> structure member error_detail.
+This is an improved version of <link linkend="libpq-oauth-authdata-oauth-bearer-token"><literal>PQAUTHDATA_OAUTH_BEARER_TOKEN</literal></link> by adding the issuer identifier and error message specification.
 </para>
 </listitem>
 
-- 
2.43.0

---

From: Andreas Karlsson <[email-masked]>
Date: Fri, 3 Jul 2026 00:16:05 +0200

> sections. See my suggestions below and the attached patch.
Ops, right patch attached now.

--
Andreas Karlsson
Percona

From ee68aa7653f2e7a0d31ec49684b66a8b9275e5d9 Mon Sep 17 00:00:00 2001
From: Andreas Karlsson <[email-masked]>
Date: Fri, 3 Jul 2026 00:01:11 +0200
Subject: [PATCH v2] Move some OAuth related release note items to the right
 section

The two validator items belong under Server Configuration and Source
Code respectively and the one about PQAUTHDATA_OAUTH_BEARER_TOKEN_V2
belongs to libpq.
---
 doc/src/sgml/release-19.sgml | 44 ++++++++++++++++++------------------
 1 file changed, 22 insertions(+), 22 deletions(-)

diff --git a/doc/src/sgml/release-19.sgml b/doc/src/sgml/release-19.sgml
index d8d3758d5ba..5bb4c2ce15d 100644
--- a/doc/src/sgml/release-19.sgml
+++ b/doc/src/sgml/release-19.sgml
@@ -1341,20 +1341,18 @@ New configuration file <link linkend="guc-hosts-file"><filename>PGDATA/pg_hosts.
 
 <!--
-Author: Jacob Champion <[email-masked]>
 
 <listitem>
 <para>
 
 <para>
 
@@ -2355,29 +2353,20 @@ This can also be set via the <link linkend="libpq-envars"><envar>PGOAUTHCAFILE</
 
 <!--
 
 <listitem>
 <para>
 
 <para>
 
@@ -3016,6 +3005,17 @@ Author: Heikki Linnakangas <[email-masked]>
 2026-04-06 [283e823f9] Introduce a new mechanism for registering shared memory
 -->
 
+<!--
+Author: Jacob Champion <[email-masked]>
+2026-04-03 [d438a3659] oauth: Let validators provide failure DETAILs
+-->
+
+<listitem>
+<para>
+Allow <acronym>OAUTH</acronym> validators to supply failure details (Jacob Champion)
+<ulink url="&commit_baseurl;d438a3659">&sect;</ulink>
+</para>
+
 <listitem>
 <para>
 Add simplified and improved shared memory registration function <link linkend="xfunc-shared-addin-at-startup"><function>ShmemRequestStruct()</function></link> (Heikki Linnakangas, Ashutosh Bapat)
-- 
2.43.0

---

From: Jacob Champion <[email-masked]>
Date: Thu, 2 Jul 2026 15:35:59 -0700

> Jacob, do you have any opinion here?

I've got a TODO to edit the feature docs that I haven't been able to
check off yet. But no objections to your proposed moves at the moment
(they might need to move again when I really sit down and stare at
them).

Thanks!
--Jacob