Re: Improve OAuth discovery logging

Zsolt Parragi <zsolt.parragi@percona.com>

View thread View on postgr.es

From: Zsolt Parragi <zsolt.parragi@percona.com>

To: Daniel Gustafsson <daniel@yesql.se>

Cc: PostgreSQL Hackers <pgsql-hackers@postgresql.org>, Jacob Champion <jacob.champion@enterprisedb.com>

Date: 2026-02-12T18:51:33Z

Lists: pgsql-hackers

Attachments

v2-0001-Improve-OAuth-discovery-logging.patch (application/octet-stream) patch v2-0001

Thank you for the quick review!

> Is this valuable to administrators in production, or should this perhaps be a
> DEBUGx level logging?

No, I was even thinking about removing that completely, and then
forgot about it before sending my email.
I changed it to DEBUG1, it's definitely not needed outside of
debugging oauth issues.

Commits

oauth: Don't log discovery connections by default
- e020a897efea 19 (unreleased) landed
sasl: Allow backend mechanisms to "abandon" exchanges
- c4ff16339f07 19 (unreleased) landed
Add FATAL_CLIENT_ONLY to ereport/elog
- c2bca7cc9621 19 (unreleased) landed
oauth_validator: Avoid races in log_check()
- ab8af1db4303 19 (unreleased) cited