zeek/testing/btest/scripts/base
Fupeng Zhao e4e56789db
Report PostgreSQL login success only after ReadyForQuery
Previously, Zeek treated the receipt of `AuthenticationOk` as a
successful login. However, according to the PostgreSQL
Frontend/Backend Protocol, the startup phase is not complete until
the server sends `ReadyForQuery`. It is still possible for the server
to emit an `ErrorResponse` (e.g. ERRCODE_INVALID_AUTHORIZATION_SPECIFICATION)
after `AuthenticationOk` but before `ReadyForQuery`.

This change updates the PostgreSQL analyzer to defer reporting login
success until `ReadyForQuery` is observed. This prevents false
positives in cases where authentication succeeds but session startup
fails.
2025-08-18 10:59:44 +08:00
..
files Default canonifier change to only remove first timestamp in line 2025-06-18 15:41:48 +01:00
frameworks Add options to filter at the stream level as well as globally 2025-08-12 17:31:28 -07:00
misc testing/btest/*zeek: Comment all @TEST lines 2025-04-17 16:30:23 +02:00
protocols Report PostgreSQL login success only after ReadyForQuery 2025-08-18 10:59:44 +08:00
utils btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00