Explicitly require password for SCRAM exchange
authorDaniel Gustafsson <dgustafsson@postgresql.org>
Thu, 21 Mar 2024 13:45:54 +0000 (14:45 +0100)
committerDaniel Gustafsson <dgustafsson@postgresql.org>
Thu, 21 Mar 2024 13:45:54 +0000 (14:45 +0100)
commitadcdb2c8dda4fb28e373ddff41a0de6936772249
treed15513b2c4aaa8c178b1e2b4c139dc02bfa368ce
parent24178e235ea56aca9233e640dd7ff9b17e858b07
Explicitly require password for SCRAM exchange

This refactors the SASL init flow to set password_needed on the two
SCRAM exchanges currently supported. The code already required this
but was set up in such a way that all SASL exchanges required using
a password, a restriction which may not hold for all exchanges (the
example at hand being the proposed OAuthbearer exchange).

This was extracted from a larger patchset to introduce OAuthBearer
authentication and authorization.

Author: Jacob Champion <jacob.champion@enterprisedb.com>
Discussion: https://postgr.es/m/d1b467a78e0e36ed85a09adf979d04cf124a9d4b.camel@vmware.com
src/interfaces/libpq/fe-auth.c