support for JSON Web Token - Mailing list pgsql-general

From Eugen Stan
Subject support for JSON Web Token
Date
Msg-id 18dad209-9b79-3291-ce94-73e1e6609bf3@ieugen.ro
Whole thread Raw
Responses Re: support for JSON Web Token  (Michel Pelletier <pelletier.michel@gmail.com>)
List pgsql-general
Hi,

I would like to advocate forJSON web token support in PostgreSQL.

JWT tokens are used in a lot of web applications and I think there are
some very nice use cases for passing the token down to PostgreSQL.

Some of the first thing that comes to mind is pairing it with row level
security to implement authorization policies and data access directly in DB.

I've did a bit of research and I found some prior work in [pgjwt] and
[postgres-jwt-prototype] .

It seems to be pretty easy to support since most of the work is done:
PostgreSQL has crypto support via pgcrypto and has native JSON handling
functions.

JWT is a widely used technology, especially in web applications.

This is why I think PostgreSQL should adopt a JWT extension in contrib.

I believe PostgreSQL will benefit, especially in the web apps use.


What do you think?

What would it take for a JWT extension to be added to postgresql contrib
or the official postgresql extensions ?


Thanks,

Eugen

[pgjwt] https://github.com/michelp/pgjwt

[postgres-jwt-prototype] https://github.com/larsar/postgres-jwt-prototype




pgsql-general by date:

Previous
From: Steven Lembark
Date:
Subject: Re: Where **not** to use PostgreSQL?
Next
From: Stuart McGraw
Date:
Subject: regex DoS in postgresql?