{"repo":"percona/pg_oidc_validator","free":true,"listed":false,"github":"https://github.com/percona/pg_oidc_validator","clone":"git clone https://github.com/percona/pg_oidc_validator.git","description":"OAuth validator for PostgreSQL","language":"C++","stars":35,"topics":["oauth","oidc","postgresql"],"license":null,"category":"auth-billing-email","readme_excerpt":"pg oidc validator OAuth validator library for PostgreSQL 18 This library should support most providers that implement OIDC and provide a valid JWT as an access token. Getting started Nightly builds Experimental packages are available on github: Debian/Ubuntu: - Binaries for Ubuntu 24.04 are available here. RHEL/Oracle Linux/Rocky Linux: - RPM packages for OL8 and OL9 are available here. Building from Source To build and install from sources, use make USE PGXS=1 install -j . NOTE : A a C++23 compiler and standard library is required to build pg oidc validator. Configuration 1. Enable the validator in postgresql.conf : 2. Add entries to pg hba.conf that enables OAuth authentication. Example: 3. Restart the server Configuration variables pg oidc validator.authn field This variable controls which field of the provided JWT token is used for identity mapping. By default this is the sub claim, as most providers allow the configuration of this claim to provide different user fields. In some cases however the sub claim is fixed to a randomly generated, application specific identifier which is non known before a user first connects to the application. This is not practical for mapping provider users to PostgreSQL users in a map file. Selecting a different authn field , such as email allows an easy to use persistent mapping in this case. pg oidc validator.discovery url override This variable overrides the URL the validator uses for communication with the OIDC provider. It is mainly inte","default_branch":null,"files":null,"tree":[],"storefront":"/r/percona","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/percona/pg_oidc_validator/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}