mirror of
https://github.com/dredx/prole.git
synced 2026-09-23 10:13:58 +00:00
57886f9268
- Copy pg-knoe-auth/ wholesale from upstream/knoe-db/20260523 (Task 1 of docs/plans/junie/upstream-knoe-db-20260523-integration.md). - Extension: PG18 OAUTHBEARER JWT validator using libcurl + OpenSSL RS256. - knoe-db/Dockerfile: add libcurl4-openssl-dev to dev deps; COPY src/ and build with make USE_PGXS=1 install after tds_fdw. - NOT enabled in the default database build (absent from 20_create_extensions.sh). To enable: CREATE EXTENSION pg_knoe_auth; (requires pg_hba.conf oauth_issuer). Closes Task 1 of upstream-knoe-db-20260523-integration.md.
7 lines
464 B
SQL
7 lines
464 B
SQL
-- jwks_unreachable_first_call: verify pg_knoe_auth rejects this token type
|
|
-- Full end-to-end test requires the test harness to attempt a connection
|
|
-- with the appropriate token from mock_jwks.py /token/jwks/unreachable/first/call
|
|
-- and verify the connection is rejected with an authentication error.
|
|
-- This SQL file validates the server-side GUC state is correct.
|
|
SELECT 'jwks_unreachable_first_call' AS test_case, 'requires_harness_connection_test' AS note;
|