You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Daniel Gustafsson b3f0be788a Add support for OAUTHBEARER SASL mechanism ... This commit implements OAUTHBEARER, RFC 7628, and OAuth 2.0 Device Authorization Grants, RFC 8628. In order to use this there is a new pg_hba auth method called oauth. When speaking to a OAuth- enabled server, it looks a bit like this: $ psql 'host=example.org oauth_issuer=... oauth_client_id=...' Visit https://oauth.example.org/login and enter the code: FPQ2-M4BG Device authorization is currently the only supported flow so the OAuth issuer must support that in order for users to authenticate. Third-party clients may however extend this and provide their own flows. The built-in device authorization flow is currently not supported on Windows. In order for validation to happen server side a new framework for plugging in OAuth validation modules is added. As validation is implementation specific, with no default specified in the standard, PostgreSQL does not ship with one built-in. Each pg_hba entry can specify a specific validator or be left blank for the validator installed as default. This adds a requirement on libcurl for the client side support, which is optional to build, but the server side has no additional build requirements. In order to run the tests, Python is required as this adds a https server written in Python. Tests are gated behind PG_TEST_EXTRA as they open ports. This patch has been a multi-year project with many contributors involved with reviews and in-depth discussions: Michael Paquier, Heikki Linnakangas, Zhihong Yu, Mahendrakar Srinivasarao, Andrey Chudnovsky and Stephen Frost to name a few. While Jacob Champion is the main author there have been some levels of hacking by others. Daniel Gustafsson contributed the validation module and various bits and pieces; Thomas Munro wrote the client side support for kqueue. Author: Jacob Champion <jacob.champion@enterprisedb.com> Co-authored-by: Daniel Gustafsson <daniel@yesql.se> Co-authored-by: Thomas Munro <thomas.munro@gmail.com> Reviewed-by: Daniel Gustafsson <daniel@yesql.se> Reviewed-by: Peter Eisentraut <peter@eisentraut.org> Reviewed-by: Antonin Houska <ah@cybertec.at> Reviewed-by: Kashif Zeeshan <kashi.zeeshan@gmail.com> Discussion: https://postgr.es/m/d1b467a78e0e36ed85a09adf979d04cf124a9d4b.camel@vmware.com		7 months ago
..
Makefile	…
ax_pthread.m4	…
c-compiler.m4	Remove useless configure check	8 months ago
c-library.m4	Simplify checking for xlocale.h	12 months ago
check_decls.m4	…
check_modules.pl	Update copyright for 2025	8 months ago
config.guess	Update config.guess and config.sub	1 year ago
config.sub	Update config.guess and config.sub	1 year ago
general.m4	Rename configure.in to configure.ac	5 years ago
install-sh	…
llvm.m4	jit: Require at least LLVM 14, if enabled.	12 months ago
meson.build	meson: Add initial version of meson based build system	3 years ago
missing	…
perl.m4	Remove MSVC scripts	2 years ago
pkg.m4	Fix collection of typos in the code and the documentation	4 years ago
prep_buildtree	Fix vpath build	7 years ago
programs.m4	Add support for OAUTHBEARER SASL mechanism	7 months ago
python.m4	Unify DLSUFFIX on Darwin	3 years ago
tcl.m4	…