Re: Periodic authorization expiration checks using GoAway message - Mailing list pgsql-hackers

From Jacob Champion
Subject Re: Periodic authorization expiration checks using GoAway message
Date
Msg-id CAOYmi+mb+fo++GvHNtcT2aspRL0jh1cSM7buEca=s9RYtFRfNA@mail.gmail.com
Whole thread Raw
In response to Re: Periodic authorization expiration checks using GoAway message  (Ajit Awekar <ajitpostgres@gmail.com>)
Responses Re: Periodic authorization expiration checks using GoAway message
List pgsql-hackers
On Tue, Dec 16, 2025 at 1:15 AM Ajit Awekar <ajitpostgres@gmail.com> wrote:
> >What I meant that we can already implement a background process that
> >watches active (oauth) connections, and either:
>
> >Revalidates tokens periodically using introspection APIs
>
> +1 as this will  offload validation logic to a dedicated background process.

Is the hope that batching validation will make things more efficient,
or is there another goal to using a background process? You still have
to communicate back to each backend.

--Jacob



pgsql-hackers by date:

Previous
From: Jacob Champion
Date:
Subject: Re: Periodic authorization expiration checks using GoAway message
Next
From: Andrew Dunstan
Date:
Subject: Re: meson and check-tests