Content-Type: multipart/alternative;
 boundary="------------wrrV2N9P1ML0Kq8b05ncUlC0"
Message-ID: <73b45b9b-3c07-4143-b21c-68ba66158633@ongres.com>
Date: Wed, 10 Dec 2025 13:45:15 +0100
MIME-Version: 1.0
User-Agent: Mozilla Thunderbird
Subject: Re: oauth support?
To: =?UTF-8?B?RGV2cmltIEfDvG5kw7x6?= <devrim@gunduz.org>,
 Troels Arvin <troels@arvin.dk>, pgsql-pkg-debian@lists.postgresql.org
References: <cfc37194-a5b7-49ef-b5a0-763a1a5c7603@arvin.dk>
 <3a7cd5ce3db028c1c07a1ba65462021166e67e8d.camel@gunduz.org>
Content-Language: en-US
From: =?UTF-8?B?w4FsdmFybyBIZXJuw6FuZGV6?= <aht@ongres.com>
Autocrypt: addr=aht@ongres.com; keydata=
 xsFNBF8HXQQBEACnRGsBas+BUNQkdN0O0qqfjL/G78gxAI2/6pTLsvXOmA0a6A+o16HynaBc
 PYgWeMrPj3fAlHQ4dyw2CF++LKRmr0xx04GaSi3bijCutRiyFFpdvl2VVRWlYmQhrfS4dVRl
 2cHn+umoj9DOf0DpPYLyB/tHZIaBz1TU/69/7qD3G4NaAI2uGCji2pBNI1TEhOGXPE7HHGxJ
 k4Paf4Dby3VVeufcsTPa006kXj/aEObinpE41Yl/UgeQbnnPazHPXrFyfWpPqw6+kz7Tb+19
 sOGJJAJplVmyqZ2Mewf1RtGOsBD8JABpdzLtv+FxKumnMcEYHLFgD6EQQQZiygg/wUQdXZll
 mvvxlI5VKjxHPnfPvqM44vhWSVPZicH4lWHHXPipesan+7Qg5lVjTnJZHpA6qJtddlNESFKf
 XHm7hzRgOyFuFwU2MABVjQv1noMJqOtM+SaSprEOwt4azanK/CUYQtjNKvAqxOv+YDQ6mWnF
 +Ly97BqSu/xufPzriEL7Qz/tY4Hj4nZAxtud+txhO8LCvu4NsXZUbiuMYgKzxmG9fUFkEAyL
 btBvveH0vzH0wO10lVq0MNeVWTREfRQ8bLjxj5h0pCz65x6+bdtpO0pQXmV1w0hFvwxobRHt
 JubEKLiDPktJ5jHVsa+JqP34SxHm6e9TKG2EQJVlz03RU7g4tQARAQABzTZBbHZhcm8gSGVy
 bmFuZGV6IChPbkdyZXMgR1BHIGFjY291bnQpIDxhaHRAb25ncmVzLmNvbT7CwY4EEwEKADgW
 IQTZ+rL52ABbxJPBTt4qF9KKhgviwwUCXwddBAIbAwULCQgHAgYVCgkICwIEFgIDAQIeAQIX
 gAAKCRAqF9KKhgviw7WED/44JVShqBCxbSRceu6TOR/H391tAvfyHsAV9vplA7qaqabppqC8
 rWL7t6Ngs53473TgPD+fUDo2gS/8c+TKmJGaGVnbXmFBrEB941nJ2r9Y97NtDXs3j7N7Ed4o
 nr7p01S8Q3BTIWb5tUYa+EkUFOMozPfN3OKStWPhonXADuDv6lZhmw6XkaZ5UHaf4Oj3HGeM
 0KyKWzcVzs47d3Gvi6xjeKOK3VjGNrLKeqO/Ebs8m/WpFSc73s4EbiX9141rcTpHBKzETToE
 wC85hXYNcVF+Is9SFBAbiC05gA4f+4IZK9W+C4o4cRWOlSCE2imgD375JKStaFi158HGL/uG
 8sH1ttnG1vjLUQFE694qHOUXTMUjpyiJPsZLf98LTXSawI35tFV0JwBnwPCYvIn7Bavame17
 fpszGQraXKqQKhBB+rAaHkiDTeYnFlR5St13yhbwwR7JfuHZJ4LvKbCbTxgWhNHH97k+6p9v
 cYo4cvcqgbzWG8TPDCZVR4syqfdDlpYS0YCjv2p/JkJ/rjMoopqroGYHOsNa4bltGri0e2Ms
 L72DQ4qDDqat9QQlgUIUeHB7wYlVTqy1s3z0etAHNCfV86LjcBIbx9ZIx4ztQsCkVCaKFAcX
 HZqBlo/3O4Xo9ULWYT5SCH7XXfXADxblsSRqTDAACWf/86EpwDMVHMOl6M7BTQRfB10EARAA
 uWfs9X2szukOUjFRCuwJgkVKByY8j2i4C4b4/aQF1dJqjo5Ucf16HzDv7LJJgVIEA0XTjuon
 1EelvdIcFR1cjO2b1j8k/tUc8eG0SCr/DfhbYBHllFLTT3CMNuwqqxPJ1/8HlNWrrZreloli
 /wKu5Mq2XKYkvGj/jWnUpW/nzRQJK+uQYNgNsSdcEeQUFcj0NCs3nRNsz/Av9lfMbcKL3ndE
 vYIid9KL3cT65tuwO6/x6dgTsT84tdDqqOCCuu2bfltXP4wFtXVGvTC43UpMhEO2VDNCiM19
 iihwsXJoG6dHgbh8ozINbMrmZyS68h+ITuiaFc1a7JrlXdxnMedGoIsQX0jKbYuNQEP66ovg
 3gGq5TGJ+/2TvytcVHqu0mHV382z5/2duaYyTzlvTaMu9snBW5ACBn1WVguzSn1RiTBvvbd2
 kKTKtFXMkwK8EGp/0OEXAoBbSIiIeAUjAFs038YxRj24IIEI4TGNXfZwCLVDS+51EnNwI9YJ
 fOW5F5l1KiKbHDPsLDj1XytHWaX2jGcNYnFIPVbH1ctj9us7uhttlvJ+F3hBsr1+BfFsCZeu
 +UbpTF67QUxXlbo8FJbDxYQ/WPG5tClBNAXYkaUsrcR3Oe/DYLrdvWbx2P3FKVZZUit+BAxs
 +JhhgPaaMA9GOnagyPSteX5nvEfu0hPmtgMAEQEAAcLBdgQYAQoAIBYhBNn6svnYAFvEk8FO
 3ioX0oqGC+LDBQJfB10EAhsMAAoJECoX0oqGC+LDiBYP/ivrzautlV1odKBYmhWC5uRPazp5
 7Q+Z5q8ak6UkSes9+P8laJRyEcxlGm95BJKiYNq8V9L2HTiLJ1OS+QpDW+xDBVpPoQ6S8Scs
 Tp3YDIze4MPEk22gaWvXAmfr8KACFlDO4GPKTNarN2CL9zoVL8A16O8vIUoPnaH+Qaq3mgy9
 y0HlSPO+Vyy0W1zaxhLg9iG+c0jXNe+NrIZMzgZ6xMlxhUdIRFdsS9somXQbidlu53hSqf1/
 oGv53Xcv0N1O/2rxgXm6eMypl9MzSEVo62VEphxH2rGKzT7/xKB8HgxIwb9P4Zc9N2JI0GOk
 vSliuLlmZplSJoqLl2uXsbz+uo5FLkMGrzHH3gNxjHYDX42rbRx1dkcXNfSMizKXY+N9ICy5
 +6cx/z4Dj6gSucmVYKySRNdlXQ11/mklV/DoJ1bED6nKyqGBbCDuVGpjvaaBpVJutnPtN6M1
 PHSlduJgSI1xQvOc5OiwME2gxiVnXRNYXjdh4DXMjagg1W9GvJnbgSxsKmmEPL2/XaFJRnKK
 NvktDmXISoacIVqyx4nu+X33e212iAltBrZbSGN1Ehx81FP7LmNuV0H/SYAEyogGS5RFlfAn
 zrHPa5TQtrzsrc3UuCmxy7/lPImx1n4bdpD/mTZUWmYHrtmRHpl/VFCi1jrOTpr6f1SAusdA
 ycqrESCJ
In-Reply-To: <3a7cd5ce3db028c1c07a1ba65462021166e67e8d.camel@gunduz.org>
Archived-At: 
 <https://www.postgresql.org/message-id/73b45b9b-3c07-4143-b21c-68ba66158633%40ongres.com>
Precedence: bulk

This is a multi-part message in MIME format.
--------------wrrV2N9P1ML0Kq8b05ncUlC0
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 8bit


On 10/12/25 8:45, Devrim Gündüz wrote:
> Hi,
>
> On Wed, 2025-12-10 at 08:40 +0100, Troels Arvin wrote:
>> I'm reading about the new OAuth support in PostgreSQL 18. It says
>> PostgreSQL needs to be built using "--with-libcurl".
>>
>> In the PostgreSQL I get when using apt.postgresql.org, I don't see
>> anything about curl in output from "ldd
>> /usr/lib/postgresql/18/bin/postgres", nor from "ldd
>> /usr/lib/postgresql/18/bin/psql".
>>
>> Should I expect to be able to use the new OAuth feature in PostgreSQL
>> 18  with the packages from apt.postgresql.org? If so: Do I need to
>> install a particular, extra package for it to be available?
> OAuth support is in the libpq-oauth (sub)package. RPMs also split that
> into -libs-oauth subpackage for security concerns over curl.
>
> Regards,

     Hi.

     From what I can see, the package libpq-oauth contains the file:

/usr/lib/x86_64-linux-gnu/libpq-oauth-18.so

which is dynamically loaded by Postgres, see 
https://github.com/postgres/postgres/blob/master/src/interfaces/libpq/fe-auth-oauth.c#L818

     WRT libcurl, it's not linked but shows in pg_config:

$ pg_config |grep -o "with-libcurl"
with-libcurl


     Regards,

     Álvaro

-- 

Alvaro Hernandez


-----------
OnGres

--------------wrrV2N9P1ML0Kq8b05ncUlC0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: 8bit

<!DOCTYPE html>
<html>
  <head>
    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
  </head>
  <body>
    <br>
    <br>
    <div class="moz-cite-prefix">On 10/12/25 8:45, Devrim Gündüz wrote:<br>
    </div>
    <blockquote type="cite"
cite="mid:3a7cd5ce3db028c1c07a1ba65462021166e67e8d.camel@gunduz.org">
      <pre class="moz-quote-pre" wrap="">Hi,

On Wed, 2025-12-10 at 08:40 +0100, Troels Arvin wrote:
</pre>
      <blockquote type="cite">
        <pre class="moz-quote-pre" wrap="">I'm reading about the new OAuth support in PostgreSQL 18. It says 
PostgreSQL needs to be built using "--with-libcurl".

In the PostgreSQL I get when using apt.postgresql.org, I don't see 
anything about curl in output from "ldd 
/usr/lib/postgresql/18/bin/postgres", nor from "ldd 
/usr/lib/postgresql/18/bin/psql".

Should I expect to be able to use the new OAuth feature in PostgreSQL
18  with the packages from apt.postgresql.org? If so: Do I need to
install a particular, extra package for it to be available?
</pre>
      </blockquote>
      <pre class="moz-quote-pre" wrap="">
OAuth support is in the libpq-oauth (sub)package. RPMs also split that
into -libs-oauth subpackage for security concerns over curl.

Regards,
</pre>
    </blockquote>
    <br>
        Hi.<br>
    <br>
        From what I can see, the package libpq-oauth contains the file:<br>
    <br>
    /usr/lib/x86_64-linux-gnu/libpq-oauth-18.so<br>
    <br>
    which is dynamically loaded by Postgres, see
<a class="moz-txt-link-freetext" href="https://github.com/postgres/postgres/blob/master/src/interfaces/libpq/fe-auth-oauth.c#L818">https://github.com/postgres/postgres/blob/master/src/interfaces/libpq/fe-auth-oauth.c#L818</a><br>
    <br>
        WRT libcurl, it's not linked but shows in pg_config:<br>
    <br>
    $ pg_config |grep -o "with-libcurl"<br>
    with-libcurl<br>
    <br>
    <br>
    <br>
        Regards,<br>
    <br>
        Álvaro<br>
    <br>
    <pre class="moz-signature" cols="72">-- 

Alvaro Hernandez


-----------
OnGres</pre>
  </body>
</html>

--------------wrrV2N9P1ML0Kq8b05ncUlC0--