database/postgres
1
0
Fork 0
mirror of https://github.com/postgres/postgres.git synced 2026-10-23 13:29:09 +03:00
Code Activity

doc PG 19 relnote: move Oauth items

Browse Source 
Reported-by: Jacob Champion

Author: Jacob Champion

Discussion: https://postgr.es/m/CAOYmi+k5h_w5p6HsVJF5k+bNGmChMAhpGU_1gjJMxHg080XibA@mail.gmail.com

Backpatch-through: 19
This commit is contained in:
Bruce Momjian
2026-07-17 15:56:54 -04:00
parent 1d4c81ad62
commit 3b5a3cfb90
1 changed files with 53 additions and 49 deletions
Download Patch File Download Diff File Expand all files Collapse all files

102
doc/src/sgml/release-19.sgml
View File

@@ -1341,17 +1341,13 @@ New configuration file <link linkend="guc-hosts-file"><filename>PGDATA/pg_hosts.
<!--
Author: Jacob Champion <jchampion@postgresql.org>
2026-04-03 [d438a3659] oauth: Let validators provide failure DETAILs
2026-04-07 [b977bd308] oauth: Allow validators to register custom HBA options
-->
<listitem>
<para>
Allow <acronym>OAUTH</acronym> validators to supply failure details (Jacob Champion)
<ulink url="&commit_baseurl;d438a3659">&sect;</ulink>
</para>
<para>
This is done by setting the <link linkend="oauth-validator-callback-validate"><structname>ValidatorModuleResult</structname></link> structure member error_detail.
Allow OAuth validators to register custom <link linkend="auth-pg-hba-conf"><filename>pg_hba.conf</filename></link> authentication options (Jacob Champion, Zsolt Parragi)
<ulink url="&commit_baseurl;b977bd308">&sect;</ulink>
</para>
</listitem>
@@ -2317,20 +2313,12 @@ Author: Jacob Champion <jchampion@postgresql.org>
<listitem>
<para>
Add special libpq protocol version 3.9999 for version testing (Jelte Fennema-Nio)
Add special libpq protocol parameters for compatibility testing (Jelte Fennema-Nio, Jacob Champion)
<ulink url="&commit_baseurl;d8d7c5dc8">&sect;</ulink>
</para>
</listitem>
<!--
Author: Jacob Champion <jchampion@postgresql.org>
2026-03-05 [b8d768583] libpq: Add PQgetThreadLock() to mirror PQregisterThreadL
-->
<listitem>
<para>
Add libpq function <link linkend="libpq-threading"><function>PQgetThreadLock()</function></link> to retrieve the current locking callback (Jacob Champion)
<ulink url="&commit_baseurl;b8d768583">&sect;</ulink>
Otherwise known as <ulink url="https://wiki.postgresql.org/wiki/Grease">protocol grease</ulink>, which was active during the 19 beta period. These will no longer be sent as of the <productname>PostgreSQL</productname> 19 official release, but the parameter reservations will remain for potential use in the future.
</para>
</listitem>
@@ -2341,7 +2329,7 @@ Author: Jacob Champion <jchampion@postgresql.org>
<listitem>
<para>
Add libpq connection parameter <link linkend="libpq-connect-oauth-ca-file"><varname>oauth_ca_file</varname></link> to specify the <acronym>OAUTH</acronym> certificate authority file (Jonathan Gonzalez V., Jacob Champion)
Add libpq connection parameter <link linkend="libpq-connect-oauth-ca-file"><varname>oauth_ca_file</varname></link> to specify an alternate certificate authority when communicating with OAuth providers (Jonathan Gonzalez V., Jacob Champion)
<ulink url="&commit_baseurl;993368113">&sect;</ulink>
</para>
@@ -2350,18 +2338,6 @@ This can also be set via the <link linkend="libpq-envars"><envar>PGOAUTHCAFILE</
</para>
</listitem>
<!--
Author: Jacob Champion <jchampion@postgresql.org>
2026-04-07 [b977bd308] oauth: Allow validators to register custom HBA options
-->
<listitem>
<para>
Allow <acronym>OAUTH</acronym> validators to register custom <link linkend="auth-pg-hba-conf"><filename>pg_hba.conf</filename></link> authentication options (Jacob Champion)
<ulink url="&commit_baseurl;b977bd308">&sect;</ulink>
</para>
</listitem>
<!--
Author: Jacob Champion <jchampion@postgresql.org>
2026-04-07 [6d00fb904] libpq: Split PGOAUTHDEBUG=UNSAFE into multiple options
@@ -2376,6 +2352,37 @@ Allow libpq environment variable <link linkend="libpq-envars"><envar>PGOAUTHDEBU
<para>
The <literal>UNSAFE</literal> option still generates all debugging output.
</para>
</listitem>
<!--
Author: Jacob Champion <jchampion@postgresql.org>
2026-03-06 [e982331b5] libpq: Introduce PQAUTHDATA_OAUTH_BEARER_TOKEN_V2
Author: Jacob Champion <jchampion@postgresql.org>
2026-03-31 [0af4d402c] libpq: Poison the v2 part of a v1 Bearer request
-->
<listitem>
<para>
Improve custom OAuth client flows (Jacob Champion)
<ulink url="&commit_baseurl;e982331b5">&sect;</ulink>
<ulink url="&commit_baseurl;0af4d402c">&sect;</ulink>
</para>
<para>
Previously, libpq reported only a generic error message during custom flow failures, and each flow implementation was required to calculate the issuer identifier independently. Add a new authdata hook type <link linkend="libpq-oauth-authdata-oauth-bearer-token-v2"><literal>PQAUTHDATA_OAUTH_BEARER_TOKEN_V2</literal></link> that precomputes the issuer ID and lets hooks provide error details.
</para>
</listitem>
<!--
Author: Jacob Champion <jchampion@postgresql.org>
2026-03-05 [b8d768583] libpq: Add PQgetThreadLock() to mirror PQregisterThreadL
-->
<listitem>
<para>
Add libpq function <link linkend="libpq-threading"><function>PQgetThreadLock()</function></link> to retrieve the current locking callback (Jacob Champion)
<ulink url="&commit_baseurl;b8d768583">&sect;</ulink>
</para>
</listitem>
</itemizedlist>
@@ -2956,25 +2963,6 @@ Allow extensions to replace <link linkend="xfunc-sql-functions-returning-set">se
</para>
</listitem>
<!--
Author: Jacob Champion <jchampion@postgresql.org>
2026-03-06 [e982331b5] libpq: Introduce PQAUTHDATA_OAUTH_BEARER_TOKEN_V2
Author: Jacob Champion <jchampion@postgresql.org>
2026-03-31 [0af4d402c] libpq: Poison the v2 part of a v1 Bearer request
-->
<listitem>
<para>
Add a new <acronym>OAUTH</acronym> flow hook <link linkend="libpq-oauth-authdata-oauth-bearer-token-v2"><literal>PQAUTHDATA_OAUTH_BEARER_TOKEN_V2</literal></link> (Jacob Champion)
<ulink url="&commit_baseurl;e982331b5">&sect;</ulink>
<ulink url="&commit_baseurl;0af4d402c">&sect;</ulink>
</para>
<para>
This is an improved version of <link linkend="libpq-oauth-authdata-oauth-bearer-token"><literal>PQAUTHDATA_OAUTH_BEARER_TOKEN</literal></link> by adding the issuer identifier and error message specification.
</para>
</listitem>
<!--
Author: Heikki Linnakangas <heikki.linnakangas@iki.fi>
2025-12-09 [bd8d9c9bd] Widen MultiXactOffset to 64 bits
@@ -3011,6 +2999,22 @@ Allow <link linkend="logicaldecoding-pgoutput">logical decoding plugins</link> t
</para>
</listitem>
<!--
Author: Jacob Champion <jchampion@postgresql.org>
2026-04-03 [d438a3659] oauth: Let validators provide failure DETAILs
-->
<listitem>
<para>
Allow OAuth validators to supply failure details (Jacob Champion)
<ulink url="&commit_baseurl;d438a3659">&sect;</ulink>
</para>
<para>
This is done by setting the <link linkend="oauth-validator-callback-validate"><structname>ValidatorModuleResult</structname></link> structure member error_detail.
</para>
</listitem>
<!--
Author: Heikki Linnakangas <heikki.linnakangas@iki.fi>
2026-04-06 [283e823f9] Introduce a new mechanism for registering shared memory