-- wrong_aud_string: verify pg_knoe_auth rejects this token type
-- Full end-to-end test requires the test harness to attempt a connection
-- with the appropriate token from mock_jwks.py /token/wrong/aud/string
-- and verify the connection is rejected with an authentication error.
-- This SQL file validates the server-side GUC state is correct.
SELECT 'wrong_aud_string' AS test_case, 'requires_harness_connection_test' AS note;