doc: Clarify that OAuth bearer tokens are sent in clear text The bearer token used by OAUTHBEARER authentication is transmitted in clear text over the network, which makes it vulnerable to sniffing and similar attacks. This adds a note that SSL connections are recommended for OAuth authentication.
Backpatch down to v18 where OAuth was introduced. Author: Zsolt Parragi <[email protected]> Co-authored-by: Daniel Gustafsson <[email protected]> Discussion: https://postgr.es/m/can4czfny23wwkf+78qg3cfunjjpqwfc7enp7qcypb6sg-nh...@mail.gmail.com Backpatch-through: 18 Branch ------ REL_19_STABLE Details ------- https://git.postgresql.org/pg/commitdiff/1123e2feefc822c00d37b8d6e5ef77217c89e44d Modified Files -------------- doc/src/sgml/client-auth.sgml | 8 ++++++-- doc/src/sgml/protocol.sgml | 10 ++++++++++ 2 files changed, 16 insertions(+), 2 deletions(-)
