Skip to content

Commit 9e3ef21

Browse files
authored
Update README.md
It's actually the opposite of what was described: if you use the short name of the scope, Entra will consider you're referring to a Microsoft Graph (00000003-0000-0000-c000-000000000000) one. Ref: https://learn.microsoft.com/en-us/answers/questions/2285300/get-valid-access-token-for-custom-scope-from-ms-en
1 parent d98f1d7 commit 9e3ef21

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

README.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -77,7 +77,7 @@ psql 'host=127.0.0.1 dbname=name user=rolename oauth_issuer=http://127.0.0.1:808
7777
### Microsoft / Entra ID
7878
* `oauth_issuer` for postgres should be `https://login.microsoftonline.com/<tenant_id>/v2.0`
7979
* It generates different JWTs for providers without custom scopes and with custom scopes.
80-
The library can only validate JWTs with custom scopes, only use the short name without URI schema and UUID in the `scope` parameter in `pg_hba.conf`
80+
The library can only validate JWTs with custom scopes; use the full scope name (api://<application id>/<scope name>) in the `scope` parameter in `pg_hba.conf`
8181

8282
## Google OIDC
8383
Google has some quirks which are currently not supported by the core PostgreSQL oauth code. So for now this extension can unfortunately not support it.

0 commit comments

Comments
 (0)