Hi,
I noticed that some of the OAuth-realted items ended up under the wrong
sections. See my suggestions below and the attached patch.
Jacob, do you have any opinion here?
= Add a new OAUTH flow hook PQAUTHDATA_OAUTH_BEARER_TOKEN_V2
Should go under "libpq"
= Allow custom OAUTH validators to register custom pg_hba.conf
authentication options
Should go under "Server Configuration". It could arguably go under
"Source Code" too but that seems less useful to the reader.
= Allow OAUTH validators to supply failure details
Should go under "Source Code" as this is not user facing.
--
Andreas Karlsson
Percona
From 73684c2832cd652fd055924ff0f3199862714efb Mon Sep 17 00:00:00 2001
From: Andreas Karlsson <[email protected]>
Date: Fri, 3 Jul 2026 00:01:11 +0200
Subject: [PATCH v1] Move some OAuth related release note items to the right
section
The two validator items belong under Server Configuration and Source
Code respectively and the one about PQAUTHDATA_OAUTH_BEARER_TOKEN_V2
belongs to libpq.
---
doc/src/sgml/release-19.sgml | 42 ++++++++++++++++++------------------
1 file changed, 21 insertions(+), 21 deletions(-)
diff --git a/doc/src/sgml/release-19.sgml b/doc/src/sgml/release-19.sgml
index d8d3758d5ba..194aee056e3 100644
--- a/doc/src/sgml/release-19.sgml
+++ b/doc/src/sgml/release-19.sgml
@@ -1341,20 +1341,29 @@ New configuration file <link linkend="guc-hosts-file"><filename>PGDATA/pg_hosts.
<!--
Author: Jacob Champion <[email protected]>
-2026-03-06 [e982331b5] libpq: Introduce PQAUTHDATA_OAUTH_BEARER_TOKEN_V2
+2026-04-07 [b977bd308] oauth: Allow validators to register custom HBA options
+-->
+
+<listitem>
+<para>
+Allow custom <acronym>OAUTH</acronym> validators to register custom <link linkend="auth-pg-hba-conf"><filename>pg_hba.conf</filename></link> authentication options (Jacob Champion)
+<ulink url="&commit_baseurl;b977bd308">§</ulink>
+</para>
+</listitem>
+
+<!--
Author: Jacob Champion <[email protected]>
-2026-03-31 [0af4d402c] libpq: Poison the v2 part of a v1 Bearer request
+2026-04-03 [d438a3659] oauth: Let validators provide failure DETAILs
-->
<listitem>
<para>
-Add a new <acronym>OAUTH</acronym> flow hook <link linkend="libpq-oauth-authdata-oauth-bearer-token-v2"><literal>PQAUTHDATA_OAUTH_BEARER_TOKEN_V2</literal></link> (Jacob Champion)
-<ulink url="&commit_baseurl;e982331b5">§</ulink>
-<ulink url="&commit_baseurl;0af4d402c">§</ulink>
+Allow <acronym>OAUTH</acronym> validators to supply failure details (Jacob Champion)
+<ulink url="&commit_baseurl;d438a3659">§</ulink>
</para>
<para>
-This is an improved version of <link linkend="libpq-oauth-authdata-oauth-bearer-token"><literal>PQAUTHDATA_OAUTH_BEARER_TOKEN</literal></link> by adding the issuer identifier and error message specification.
+This is done by setting the <link linkend="oauth-validator-callback-validate"><structname>ValidatorModuleResult</structname></link> structure member error_detail.
</para>
</listitem>
@@ -2355,29 +2364,20 @@ This can also be set via the <link linkend="libpq-envars"><envar>PGOAUTHCAFILE</
<!--
Author: Jacob Champion <[email protected]>
-2026-04-07 [b977bd308] oauth: Allow validators to register custom HBA options
--->
-
-<listitem>
-<para>
-Allow custom <acronym>OAUTH</acronym> validators to register custom <link linkend="auth-pg-hba-conf"><filename>pg_hba.conf</filename></link> authentication options (Jacob Champion)
-<ulink url="&commit_baseurl;b977bd308">§</ulink>
-</para>
-</listitem>
-
-<!--
+2026-03-06 [e982331b5] libpq: Introduce PQAUTHDATA_OAUTH_BEARER_TOKEN_V2
Author: Jacob Champion <[email protected]>
-2026-04-03 [d438a3659] oauth: Let validators provide failure DETAILs
+2026-03-31 [0af4d402c] libpq: Poison the v2 part of a v1 Bearer request
-->
<listitem>
<para>
-Allow <acronym>OAUTH</acronym> validators to supply failure details (Jacob Champion)
-<ulink url="&commit_baseurl;d438a3659">§</ulink>
+Add a new <acronym>OAUTH</acronym> flow hook <link linkend="libpq-oauth-authdata-oauth-bearer-token-v2"><literal>PQAUTHDATA_OAUTH_BEARER_TOKEN_V2</literal></link> (Jacob Champion)
+<ulink url="&commit_baseurl;e982331b5">§</ulink>
+<ulink url="&commit_baseurl;0af4d402c">§</ulink>
</para>
<para>
-This is done by setting the <link linkend="oauth-validator-callback-validate"><structname>ValidatorModuleResult</structname></link> structure member error_detail.
+This is an improved version of <link linkend="libpq-oauth-authdata-oauth-bearer-token"><literal>PQAUTHDATA_OAUTH_BEARER_TOKEN</literal></link> by adding the issuer identifier and error message specification.
</para>
</listitem>
--
2.43.0
