Pgx: Support for SCRAM Authentication

Created on 22 Aug 2018  路  7Comments  路  Source: jackc/pgx

It would be nice if pgx could support the SCRAM Authentication method offered by PostgreSQL
since version 10.

https://www.postgresql.org/docs/10/static/auth-methods.html#AUTH-PASSWORD

This method saves password in a more secure manner based on RFC7677, so that they are more safe
if the database gets copied from the server or found in a backup. According to https://pages.nist.gov/800-63-3/sp800-63b.html#sec5 that is recommended.

Most helpful comment

Okay. Here it is: 5044e8473ad948114b6cb63f6f30f94fc7834667

All 7 comments

I agree it'd be good to have, but it's not something I can tackle right now.

@jackc still good that you signal agreement with the feature wish. Thanks for the reply. ;)

SCRAM-SHA-256 is now the preferred authentication method from 10+ per Authentication Methods so not having it is a huge disadvantage.

This is also something that lib/pq doesn't support and for which there are already patches for lib/pq, so maybe it wouldn't be too hard to port. See https://github.com/lib/pq/issues/817

It's been merged into lib/pq. Bump :)

Okay. Here it is: 5044e8473ad948114b6cb63f6f30f94fc7834667

Thanks!

Was this page helpful?
0 / 5 - 0 ratings

Related issues

Nokel81 picture Nokel81  路  6Comments

kokizzu picture kokizzu  路  6Comments

deletexl picture deletexl  路  4Comments

kellabyte picture kellabyte  路  11Comments

jeromer picture jeromer  路  5Comments