The Database Package Manager for PostgreSQL Trusted Language Extensions

• set_user

  2 60 4.0 C

  PostgreSQL extension allowing privilege escalation with enhanced logging and control

  

I think you can use https://github.com/pgaudit/set_user combined with some pgbouncer configuration to solve that, but agreed that postgres doesn't have perfect support for this scenario. It'd be better to have a proxy that is designed specifically for this use case that knows how to drive something like the set_user extension (and better if it were to be merged upstream).

• sql-examples

  10 342 1.1 Vue

  Curated list of SQL to help you find useful script easily 🚀

  

• WorkOS

  workos.com sponsored

  The modern identity platform for B2B SaaS. The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning.

  

• pg_tle

  8 294 7.7 C

  Framework for building trusted language extensions for PostgreSQL

  

Partially correct, this doesn't work with RDS as you can't install pgsql-http (a requirement for automatic install). However all the extensions listed are "Trusted Language Extensions for PostgreSQL" which was developed by AWS to enable installing extensions written in "Safe" languages. So I believe the all the extensions listed could bee installed manually.

https://github.com/aws/pg_tle

https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/Postg...

• bugzino

  1 12 2.2 Kotlin

  A demo showing how to build a Jetpack Compose Multiplatform app that connects directly to a PostgreSQL backend

  

At KotlinConf today I gave a talk on designing apps with two-tier architecture, where you implement your entire app without the web stack appearing anywhere at all. Instead you publish desktop and mobile apps that connect directly to an RDBMS like PostgreSQL via its native protocol, and use server extensions for any logic that is inconvenient to do with SQL.

This approach might seem horrifyingly outside-the-box but has a lot of advantages, and some of the reasons we didn't do things this way historically have been solved in recent years.

Because it was KotlinConf the demo uses PL/Java, which is pretty nice because there's such a healthy ecosystem of stuff based around JDBC and because deploying JVM stuff doesn't require any sort of cross-compilation. PL/Java also supports (for now) trusted extensions using sandboxing, although of course the sandbox can just get in the way and normally you trust your own server anyway so this is a double edged sword.

The demo code can be found here (it's a prototype and nobody reviewed it yet so be gentle)

https://github.com/hydraulic-software/bugzino

I'll write up a blog post version of the talk, but for now I had to mention that DBaaS providers don't actually enable this sort of design because they like to wall off the full power of the RDBMS behind custom APIs. But in two-tier design you really lean into the database and use all of its features. So, it'd be nice if:

a. database.dev were to support PL/Java extensions.

b. Supabase were to allow direct connections, as the native DB protocol supports a lot of features that otherwise have to be sort of hacked on top of HTTP. Ultimately, HTTP is designed to fetch hypertext whereas the PG native protocol is designed to work with data, and that difference shines through in a bunch of ways.

• pgbouncer

  34 2,627 8.8 C

  lightweight connection pooler for PostgreSQL

  

Connection poolers like PgBouncer [1] (traditional) and Supabase's Supavisor [2] (new) come to mind.

[1] https://www.pgbouncer.org/

• supavisor

  15 1,567 9.0 Elixir

  A cloud-native, multi-tenant Postgres connection pooler.

  

[2] https://github.com/supabase/supavisor

• pgress

  3 2 0.0 TypeScript

  Native PostgreSQL JavaScript client library for web browsers

I had fun with a similar concept: just access the database from the browser using nginx/TLS/lua: https://github.com/alexanderguy/pgress

If you're good with your authenticated users directly talking to the DB (which there are plenty of uses for), it's a great way to get your data into the browser.

• InfluxDB

  www.influxdata.com sponsored

  Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

  

• omnigres

  15 1,251 9.7 C

  Postgres as a Platform

  

Very much in the same vein: https://github.com/omnigres/omnigres

Suggest a related project