From: Bruce Momjian Date: Fri, 17 Jul 2026 19:56:54 +0000 (-0400) Subject: doc PG 19 relnote: move Oauth items X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=3b5a3cfb903eca6dfc87319e0ac29e3e23430e08;p=thirdparty%2Fpostgresql.git doc PG 19 relnote: move Oauth items Reported-by: Jacob Champion Author: Jacob Champion Discussion: https://postgr.es/m/CAOYmi+k5h_w5p6HsVJF5k+bNGmChMAhpGU_1gjJMxHg080XibA@mail.gmail.com Backpatch-through: 19 --- diff --git a/doc/src/sgml/release-19.sgml b/doc/src/sgml/release-19.sgml index cc47c190c9c..75f0ea04fda 100644 --- a/doc/src/sgml/release-19.sgml +++ b/doc/src/sgml/release-19.sgml @@ -1341,17 +1341,13 @@ New configuration file PGDATA/pg_hosts. -Allow OAUTH validators to supply failure details (Jacob Champion) -§ - - - -This is done by setting the ValidatorModuleResult structure member error_detail. +Allow OAuth validators to register custom pg_hba.conf authentication options (Jacob Champion, Zsolt Parragi) +§ @@ -2317,20 +2313,12 @@ Author: Jacob Champion -Add special libpq protocol version 3.9999 for version testing (Jelte Fennema-Nio) +Add special libpq protocol parameters for compatibility testing (Jelte Fennema-Nio, Jacob Champion) § - - - - -Add libpq function PQgetThreadLock() to retrieve the current locking callback (Jacob Champion) -§ +Otherwise known as protocol grease, which was active during the 19 beta period. These will no longer be sent as of the PostgreSQL 19 official release, but the parameter reservations will remain for potential use in the future. @@ -2341,7 +2329,7 @@ Author: Jacob Champion -Add libpq connection parameter oauth_ca_file to specify the OAUTH certificate authority file (Jonathan Gonzalez V., Jacob Champion) +Add libpq connection parameter oauth_ca_file to specify an alternate certificate authority when communicating with OAuth providers (Jonathan Gonzalez V., Jacob Champion) § @@ -2352,29 +2340,48 @@ This can also be set via the PGOAUTHCAFILE -2026-04-07 [b977bd308] oauth: Allow validators to register custom HBA options +2026-04-07 [6d00fb904] libpq: Split PGOAUTHDEBUG=UNSAFE into multiple options --> -Allow OAUTH validators to register custom pg_hba.conf authentication options (Jacob Champion) -§ +Allow libpq environment variable PGOAUTHDEBUG to specify particular debug options (Zsolt Parragi, Jacob Champion) +§ + + + +The UNSAFE option still generates all debugging output. -Allow libpq environment variable PGOAUTHDEBUG to specify particular debug options (Zsolt Parragi, Jacob Champion) -§ +Improve custom OAuth client flows (Jacob Champion) +§ +§ -The UNSAFE option still generates all debugging output. +Previously, libpq reported only a generic error message during custom flow failures, and each flow implementation was required to calculate the issuer identifier independently. Add a new authdata hook type PQAUTHDATA_OAUTH_BEARER_TOKEN_V2 that precomputes the issuer ID and lets hooks provide error details. + + + + + + + +Add libpq function PQgetThreadLock() to retrieve the current locking callback (Jacob Champion) +§ @@ -2956,25 +2963,6 @@ Allow extensions to replace se - - - - -Add a new OAUTH flow hook PQAUTHDATA_OAUTH_BEARER_TOKEN_V2 (Jacob Champion) -§ -§ - - - -This is an improved version of PQAUTHDATA_OAUTH_BEARER_TOKEN by adding the issuer identifier and error message specification. - - - + + + +Allow OAuth validators to supply failure details (Jacob Champion) +§ + + + +This is done by setting the ValidatorModuleResult structure member error_detail. + + +