-- wrong_iss: verify pg_knoe_auth rejects this token type -- Full end-to-end test requires the test harness to attempt a connection -- with the appropriate token from mock_jwks.py /token/wrong/iss -- and verify the connection is rejected with an authentication error. -- This SQL file validates the server-side GUC state is correct. SELECT 'wrong_iss' AS test_case, 'requires_harness_connection_test' AS note;