mirror of
https://github.com/postgres/postgres.git
synced 2025-11-03 09:13:20 +03:00
29275b1d17
Reported-by: Michael Paquier Discussion: https://postgr.es/m/ZZKTDPxBBMt3C0J9@paquier.xyz Backpatch-through: 12
75 lines
1.5 KiB
C
75 lines
1.5 KiB
C
/* -------------------------------------------------------------------------
|
|
*
|
|
* auth_delay.c
|
|
*
|
|
* Copyright (c) 2010-2024, PostgreSQL Global Development Group
|
|
*
|
|
* IDENTIFICATION
|
|
* contrib/auth_delay/auth_delay.c
|
|
*
|
|
* -------------------------------------------------------------------------
|
|
*/
|
|
#include "postgres.h"
|
|
|
|
#include <limits.h>
|
|
|
|
#include "libpq/auth.h"
|
|
#include "port.h"
|
|
#include "utils/guc.h"
|
|
#include "utils/timestamp.h"
|
|
|
|
PG_MODULE_MAGIC;
|
|
|
|
/* GUC Variables */
|
|
static int auth_delay_milliseconds = 0;
|
|
|
|
/* Original Hook */
|
|
static ClientAuthentication_hook_type original_client_auth_hook = NULL;
|
|
|
|
/*
|
|
* Check authentication
|
|
*/
|
|
static void
|
|
auth_delay_checks(Port *port, int status)
|
|
{
|
|
/*
|
|
* Any other plugins which use ClientAuthentication_hook.
|
|
*/
|
|
if (original_client_auth_hook)
|
|
original_client_auth_hook(port, status);
|
|
|
|
/*
|
|
* Inject a short delay if authentication failed.
|
|
*/
|
|
if (status != STATUS_OK)
|
|
{
|
|
pg_usleep(1000L * auth_delay_milliseconds);
|
|
}
|
|
}
|
|
|
|
/*
|
|
* Module Load Callback
|
|
*/
|
|
void
|
|
_PG_init(void)
|
|
{
|
|
/* Define custom GUC variables */
|
|
DefineCustomIntVariable("auth_delay.milliseconds",
|
|
"Milliseconds to delay before reporting authentication failure",
|
|
NULL,
|
|
&auth_delay_milliseconds,
|
|
0,
|
|
0, INT_MAX / 1000,
|
|
PGC_SIGHUP,
|
|
GUC_UNIT_MS,
|
|
NULL,
|
|
NULL,
|
|
NULL);
|
|
|
|
MarkGUCPrefixReserved("auth_delay");
|
|
|
|
/* Install Hooks */
|
|
original_client_auth_hook = ClientAuthentication_hook;
|
|
ClientAuthentication_hook = auth_delay_checks;
|
|
}
|