Skip to content

feat: use scram hash in users.toml#908

Merged
levkk merged 6 commits intomainfrom
levkk-allow-for-scram-hash-in-users-toml
Apr 16, 2026
Merged

feat: use scram hash in users.toml#908
levkk merged 6 commits intomainfrom
levkk-allow-for-scram-hash-in-users-toml

Conversation

@levkk
Copy link
Copy Markdown
Collaborator

@levkk levkk commented Apr 16, 2026

Allow to specify SCRAM-SHA-256 hashes in users.toml instead of plaintext passwords. Users can authenticate to pgdog without us having to store the password anywhere.

Server auth has to be passwordless, however, e.g. RDS IAM or trust.

@codecov
Copy link
Copy Markdown

codecov bot commented Apr 16, 2026

Codecov Report

❌ Patch coverage is 73.05389% with 45 lines in your changes missing coverage. Please review.

Files with missing lines Patch % Lines
pgdog-config/src/users.rs 57.57% 14 Missing ⚠️
pgdog/src/backend/pool/connection/mod.rs 0.00% 11 Missing ⚠️
pgdog/src/auth/scram/server.rs 90.00% 9 Missing ⚠️
pgdog/src/cli.rs 0.00% 7 Missing ⚠️
pgdog/src/frontend/client/mod.rs 0.00% 4 Missing ⚠️

📢 Thoughts on this report? Let us know!

@blacksmith-sh
Copy link
Copy Markdown
Contributor

blacksmith-sh bot commented Apr 16, 2026

Found 2 test failures on Blacksmith runners:

Failures

Test View Logs
unbans all pools View Logs
connection/tcp broken database both down unbans all pools View Logs

Fix in Cursor

@levkk levkk merged commit a8157ee into main Apr 16, 2026
10 of 11 checks passed
@levkk levkk deleted the levkk-allow-for-scram-hash-in-users-toml branch April 16, 2026 21:09
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant