Re: SCRAM authentication, take three
Michael Paquier <michael.paquier@gmail.com>
From: Michael Paquier <michael.paquier@gmail.com>
To: Heikki Linnakangas <hlinnaka@iki.fi>
Cc: pgsql-hackers <pgsql-hackers@postgresql.org>
Date: 2017-02-15T12:27:13Z
Lists: pgsql-hackers
On Wed, Feb 15, 2017 at 7:58 PM, Heikki Linnakangas <hlinnaka@iki.fi> wrote: > On 02/09/2017 09:33 AM, Michael Paquier wrote: >> Now regarding the shape of the implementation for SCRAM, we need one >> thing: a set of routines in src/common/ to build decompositions for a >> given UTF-8 string with conversion UTF8 string <=> pg_wchar array, the >> decomposition and the reordering. The extension attached roughly >> implements that. What we can actually do as well is have in contrib/ a >> module that does NFK[C|D] using the base APIs in src/common/. Using >> arrays of pg_wchar (integers) to manipulate the characters, we can >> validate and have a set of regression tests that do *not* have to >> print non-ASCII characters. > > > A contrib module or built-in extra functions to deal with Unicode characters > might be handy for a lot of things. But I'd leave that out for now, to keep > this patch minimal. No problem from me. I'll get something for SASLprep in the shape of something like the above. It should not take me long. -- Michael
Commits
-
Rename "scram" to "scram-sha-256" in pg_hba.conf and password_encryption.
- c727f120ff50 10.0 landed
-
Support SCRAM-SHA-256 authentication (RFC 5802 and 7677).
- 818fd4a67d61 10.0 landed