Method post_startup

nodedb/src/control/server/pgwire/handler/core.rs:490–545

(
        &self,
        client: &mut C,
        _message: PgWireFrontendMessage,
    )

#[async_trait]
impl NoopStartupHandler for NodeDbPgHandler {
    async fn post_startup<C>(
        &self,
        client: &mut C,
        _message: PgWireFrontendMessage,
    ) -> PgWireResult<()>
    where
        C: ClientInfo + Sink<PgWireBackendMessage> + Unpin + Send,
        C::Error: Debug,
        PgWireError: From<<C as Sink<PgWireBackendMessage>>::Error>,
    {
        if !matches!(self.auth_mode, AuthMode::Trust) {
            return Ok(());
        }

        let username = client
            .metadata()
            .get("user")
            .cloned()
            .unwrap_or_else(|| "unknown".to_string());

        if self
            .state
            .credentials
            .to_identity(&username, AuthMethod::Trust)
            .is_some()
        {
            return Ok(());
        }

        // Bootstrap: an empty credential store admits the first connecting
        // user as a tenant-1 superuser and persists them so subsequent
        // queries on the same connection (and any reconnect) resolve
        // through the normal strict path.
        if self.state.credentials.is_empty() {
            let _ = self.state.credentials.create_user(
                &username,
                "",
                TenantId::new(1),
                vec![Role::Superuser],
            );
            return Ok(());
        }

        let source = client.socket_addr().to_string();
        self.state.audit_record(
            AuditEvent::AuthFailure,
            None,
            &source,
            &format!("trust auth: user '{username}' does not exist"),
        );
        Err(PgWireError::UserError(Box::new(ErrorInfo::new(
            "FATAL".to_owned(),
            "28000".to_owned(),
            format!("trust auth: user '{username}' does not exist"),
        ))))
    }
}