From 3b5a3cfb903eca6dfc87319e0ac29e3e23430e08 Mon Sep 17 00:00:00 2001 From: Bruce Momjian Date: Fri, 17 Jul 2026 15:56:54 -0400 Subject: [PATCH] doc PG 19 relnote: move Oauth items Reported-by: Jacob Champion Author: Jacob Champion Discussion: https://postgr.es/m/CAOYmi+k5h_w5p6HsVJF5k+bNGmChMAhpGU_1gjJMxHg080XibA@mail.gmail.com Backpatch-through: 19 --- doc/src/sgml/release-19.sgml | 102 ++++++++++++++++++----------------- 1 file changed, 53 insertions(+), 49 deletions(-) diff --git a/doc/src/sgml/release-19.sgml b/doc/src/sgml/release-19.sgml index cc47c190c9c..75f0ea04fda 100644 --- a/doc/src/sgml/release-19.sgml +++ b/doc/src/sgml/release-19.sgml @@ -1341,17 +1341,13 @@ New configuration file PGDATA/pg_hosts. -Allow OAUTH validators to supply failure details (Jacob Champion) -§ - - - -This is done by setting the ValidatorModuleResult structure member error_detail. +Allow OAuth validators to register custom pg_hba.conf authentication options (Jacob Champion, Zsolt Parragi) +§ @@ -2317,20 +2313,12 @@ Author: Jacob Champion -Add special libpq protocol version 3.9999 for version testing (Jelte Fennema-Nio) +Add special libpq protocol parameters for compatibility testing (Jelte Fennema-Nio, Jacob Champion) § - - - - -Add libpq function PQgetThreadLock() to retrieve the current locking callback (Jacob Champion) -§ +Otherwise known as protocol grease, which was active during the 19 beta period. These will no longer be sent as of the PostgreSQL 19 official release, but the parameter reservations will remain for potential use in the future. @@ -2341,7 +2329,7 @@ Author: Jacob Champion -Add libpq connection parameter oauth_ca_file to specify the OAUTH certificate authority file (Jonathan Gonzalez V., Jacob Champion) +Add libpq connection parameter oauth_ca_file to specify an alternate certificate authority when communicating with OAuth providers (Jonathan Gonzalez V., Jacob Champion) § @@ -2350,18 +2338,6 @@ This can also be set via the PGOAUTHCAFILE - - - - -Allow OAUTH validators to register custom pg_hba.conf authentication options (Jacob Champion) -§ - - - + + + +Improve custom OAuth client flows (Jacob Champion) +§ +§ + + + +Previously, libpq reported only a generic error message during custom flow failures, and each flow implementation was required to calculate the issuer identifier independently. Add a new authdata hook type PQAUTHDATA_OAUTH_BEARER_TOKEN_V2 that precomputes the issuer ID and lets hooks provide error details. + + + + + + + +Add libpq function PQgetThreadLock() to retrieve the current locking callback (Jacob Champion) +§ + @@ -2956,25 +2963,6 @@ Allow extensions to replace se - - - - -Add a new OAUTH flow hook PQAUTHDATA_OAUTH_BEARER_TOKEN_V2 (Jacob Champion) -§ -§ - - - -This is an improved version of PQAUTHDATA_OAUTH_BEARER_TOKEN by adding the issuer identifier and error message specification. - - - + + + +Allow OAuth validators to supply failure details (Jacob Champion) +§ + + + +This is done by setting the ValidatorModuleResult structure member error_detail. + + +