Skip to content

Commit 877c540

Browse files
committed
Update with second round of feedback
- Removed important note at the end as it's redundant - Cleaned step 1 to make it clearer how users can install the package which is already bundled - Rewrote examples in step 3 to be clearer
1 parent d8fe01a commit 877c540

1 file changed

Lines changed: 3 additions & 11 deletions

File tree

  • docs/solutions/authentication

docs/solutions/authentication/oidc.md

Lines changed: 3 additions & 11 deletions
Original file line numberDiff line numberDiff line change
@@ -46,12 +46,7 @@ Follow these steps to set up OIDC authentication for your PostgreSQL database.
4646

4747
1. Install the `pg_oidc_validator` package.
4848

49-
Pre-built packages are not available in the default system repositories.
50-
51-
You can download pre-built packages from the `pg_oidc_validator` project (see the project releases page):
52-
53-
- Debian/Ubuntu: available for Ubuntu 24.04
54-
- RHEL/Oracle Linux/Rocky Linux: RPM packages for OL8 and OL9
49+
For more information, see the [Quickstart guide](../../installing.md).
5550

5651
Alternatively, you can build the extension from source:
5752

@@ -60,7 +55,7 @@ Follow these steps to set up OIDC authentication for your PostgreSQL database.
6055
```
6156

6257
!!! note
63-
A C++23 compiler and standard library is required to build pg_oidc_validator.
58+
A C++23 compiler and standard library is required to build `pg_oidc_validator`.
6459

6560
2. Edit `postgresql.conf` and add the validator library:
6661

@@ -74,14 +69,11 @@ Follow these steps to set up OIDC authentication for your PostgreSQL database.
7469
3. Add an OAuth authentication rule to `pg_hba.conf`:
7570

7671
```ini
77-
host all all 192.168.1.0/24 oauth scope="openid",issuer=https://your-oidc-provider
72+
host all all 192.168.1.0/24 oauth scope="openid email",issuer=https://oidc.example.com
7873
```
7974

8075
Where:
8176

8277
* `oauth` enables OAuth authentication
8378
* `scope` is the required OIDC scope
8479
* `issuer` is the URL of the OIDC identity provider
85-
86-
!!! important
87-
PostgreSQL does not issue OIDC tokens. Clients must obtain an access token from an external identity provider before connecting.

0 commit comments

Comments
 (0)