Re: Proposal: Support custom authentication methods using hooks - Mailing list pgsql-hackers

From Peter Eisentraut
Subject Re: Proposal: Support custom authentication methods using hooks
Date
Msg-id df770761-61a4-17ac-6368-e1fa88702f10@enterprisedb.com
Whole thread Raw
In response to Re: Proposal: Support custom authentication methods using hooks  (samay sharma <smilingsamay@gmail.com>)
List pgsql-hackers
On 15.03.22 20:27, samay sharma wrote:
> This patch-set adds the following:
> 
> * Allow multiple custom auth providers to be registered (Addressing 
> feedback from Aleksander and Andrew)
> * Modify the test extension to use SCRAM to exchange secrets (Based on 
> Andres's suggestion)
> * Add support for custom auth options to configure provider's behavior 
> (by exposing a new hook) (Required by OAUTHBEARER)
> * Allow custom auth methods to use usermaps. (Required by OAUTHBEARER)

Some feedback on this specific patch set:

Custom authentication methods should be able to register their own name 
other than "custom".  You ought to refactor things so that existing 
methods such as ldap and pam go through your extension interface.  So 
the whole thing should be more like a lookup table or list with some 
built-in entries that modules can dynamically add on to.

Then you also don't need a test module, since the existing 
authentication methods would already test the interfaces.



pgsql-hackers by date:

Previous
From: Peter Geoghegan
Date:
Subject: Re: Removing more vacuumlazy.c special cases, relfrozenxid optimizations
Next
From: Andres Freund
Date:
Subject: Re: ubsan