search

dylex / postgresql-typed

Haskell PostgreSQL library with compile-time type inference
http://hackage.haskell.org/package/postgresql-typed
Other
83 stars 12 forks source link

Support for scram-sha-256 #28

Open joshuakb2 opened 2 years ago

joshuakb2 commented 2 years ago

As far as I can tell, this library currently has no support for the newer SCRAM-SHA-256 authentication method, which is more secure than MD5. Are there any plans to support this?

dylex commented 2 years ago

That's true. It looks like the protocol requires SASL (https://www.postgresql.org/docs/current/sasl-authentication.html). I don't see any up-to-date SASL implementations in haskell and am not sure what all it involves but I'm certainly open to contributions or pointers.