prole/pg-knoe-auth/test/integration/expected/kid_unknown.out
chrisfu 57886f9268 feat(pg-knoe-auth): import upstream PostgreSQL JWT auth extension; compile in knoe-db image
- Copy pg-knoe-auth/ wholesale from upstream/knoe-db/20260523 (Task 1 of
  docs/plans/junie/upstream-knoe-db-20260523-integration.md).
- Extension: PG18 OAUTHBEARER JWT validator using libcurl + OpenSSL RS256.
- knoe-db/Dockerfile: add libcurl4-openssl-dev to dev deps; COPY src/ and
  build with make USE_PGXS=1 install after tds_fdw.
- NOT enabled in the default database build (absent from 20_create_extensions.sh).
  To enable: CREATE EXTENSION pg_knoe_auth; (requires pg_hba.conf oauth_issuer).

Closes Task 1 of upstream-knoe-db-20260523-integration.md.
2026-05-23 21:52:06 -07:00

12 lines
619 B
Plaintext

-- kid_unknown: verify pg_knoe_auth rejects this token type
-- Full end-to-end test requires the test harness to attempt a connection
-- with the appropriate token from mock_jwks.py /token/kid/unknown
-- and verify the connection is rejected with an authentication error.
-- This SQL file validates the server-side GUC state is correct.
SELECT 'kid_unknown' AS test_case, 'requires_harness_connection_test' AS note;
test_case | note
--------------------------------------+---------------------------------
kid_unknown | requires_harness_connection_test
(1 row)