pg_session_jwt

pig build pkg pg_session_jwt;		# build rpm/deb

pig repo add pgsql -u   # add both repo and update cache

pig install pg_session_jwt;		# install via package name, for the active PG version

pig install pg_session_jwt -v 18;   # install for PG 18
pig install pg_session_jwt -v 17;   # install for PG 17
pig install pg_session_jwt -v 16;   # install for PG 16
pig install pg_session_jwt -v 15;   # install for PG 15
pig install pg_session_jwt -v 14;   # install for PG 14

CREATE EXTENSION pg_session_jwt;

CREATE EXTENSION pg_session_jwt;

export PGOPTIONS="-c pg_session_jwt.jwk=$MY_JWK"

SELECT auth.init();                        -- Initialize with JWK
SELECT auth.jwt_session_init('eyJ...');    -- Set and validate the JWT
SELECT auth.user_id();                     -- Get the 'sub' claim
SELECT auth.session();                     -- Get full JWT payload as JSONB

SELECT auth.user_id();   -- Returns 'sub' from request.jwt.claims
SELECT auth.session();   -- Returns full claims as JSONB

CREATE POLICY user_isolation ON my_table
    USING (user_id = auth.user_id());

CREATE POLICY team_select ON team
  FOR SELECT
  USING (organization_id = auth.organization_id());