mirror of
https://github.com/dredx/prole.git
synced 2026-09-23 10:13:58 +00:00
57886f9268
- Copy pg-knoe-auth/ wholesale from upstream/knoe-db/20260523 (Task 1 of docs/plans/junie/upstream-knoe-db-20260523-integration.md). - Extension: PG18 OAUTHBEARER JWT validator using libcurl + OpenSSL RS256. - knoe-db/Dockerfile: add libcurl4-openssl-dev to dev deps; COPY src/ and build with make USE_PGXS=1 install after tds_fdw. - NOT enabled in the default database build (absent from 20_create_extensions.sh). To enable: CREATE EXTENSION pg_knoe_auth; (requires pg_hba.conf oauth_issuer). Closes Task 1 of upstream-knoe-db-20260523-integration.md.
12 lines
611 B
Plaintext
12 lines
611 B
Plaintext
-- wrong_iss: verify pg_knoe_auth rejects this token type
|
|
-- Full end-to-end test requires the test harness to attempt a connection
|
|
-- with the appropriate token from mock_jwks.py /token/wrong/iss
|
|
-- and verify the connection is rejected with an authentication error.
|
|
-- This SQL file validates the server-side GUC state is correct.
|
|
SELECT 'wrong_iss' AS test_case, 'requires_harness_connection_test' AS note;
|
|
test_case | note
|
|
--------------------------------------+---------------------------------
|
|
wrong_iss | requires_harness_connection_test
|
|
(1 row)
|
|
|