-- tampered_sig: verify pg_knoe_auth rejects this token type
-- Full end-to-end test requires the test harness to attempt a connection
-- with the appropriate token from mock_jwks.py /token/tampered/sig
-- and verify the connection is rejected with an authentication error.
-- This SQL file validates the server-side GUC state is correct.
SELECT 'tampered_sig' AS test_case, 'requires_harness_connection_test' AS note;
              test_case               |              note               
--------------------------------------+---------------------------------
 tampered_sig | requires_harness_connection_test
(1 row)