Handle MySQL 8.0 AuthSwitchRequest during authentication

[Copilot]

MySQL 8.0 defaults to caching_sha2_password. When our client requests mysql_native_password, the server sends an AuthSwitchRequest (0xFE header) which was incorrectly treated as an EOF packet, causing all integration tests to fail with "Unknown command or packet type. (Error 1047)".

Changes

Protocol handling

• Add AuthSwitchRequestPacket to decode plugin name and auth data from switch requests
• Add AuthSwitchResponsePacket to encode auth response for switched plugin
• Update MySQLPacketDecoder to distinguish AuthSwitchRequest from EOF during handshake (AuthSwitch has >4 bytes payload)
• Handle auth switch loop in MySQLConnection.ConnectAsync()
• Strip trailing null byte from salt (MySQL sends 20-byte salt + null terminator)

CI configuration

• Use MySQL Docker service container with MYSQL_ROOT_PASSWORD environment variable for reliable root password setup
• Configure MySQL root user with mysql_native_password authentication plugin
• Update test host from localhost to 127.0.0.1 for Docker compatibility

services:
  mysql:
    image: mysql:8.0
    env:
      MYSQL_ROOT_PASSWORD: root
    ports:
      - 3306:3306

Tests

• Remove MySQL availability skip checks (MySQL should always be available for integration tests)
• Accept both "authentication failed" and "unsupported authentication plugin" as valid auth failure messages

---

✨ Let Copilot coding agent set things up for you — coding agent works faster and does higher quality work when set up for your repo.

[kerryjiang]

we should remove the MySQL Availability tool, since MySQL should be available when we run integration tests

[Copilot]

Removed the MySQL availability check tool from TestConst.cs in 4deddb1.

[kerryjiang]

remove all this kind of checks, since we can always ensure mysql server is available if we want to run integration tests

[Copilot]

Removed all MySQL availability checks from MainTest.cs and other test files in 4deddb1.

[Copilot]

Just as a heads up, I was blocked by some firewall rules while working on your feedback. Expand below for details.

Warning

Firewall rules blocked me from connecting to one or more addresses (expand for details)

I tried to connect to the following addresses, but was blocked by firewall rules:

• invalid-host-that-does-not-exist
  • Triggering command: /usr/share/dotnet/dotnet /usr/share/dotnet/dotnet exec --runtimeconfig /home/REDACTED/work/SuperSocket.MySQL/SuperSocket.MySQL/tests/SuperSocket.MySQL.Test/bin/Debug/net9.0/SuperSocket.MySQL.Test.runtimeconfig.json --depsfile /home/REDACTED/work/SuperSocket.MySQL/SuperSocket.MySQL/tests/SuperSocket.MySQL.Test/bin/Debug/net9.0/SuperSocket.MySQL.Test.deps.json /home/REDACTED/work/SuperSocket.MySQL/SuperSocket.MySQL/tests/SuperSocket.MySQL.Test/bin/Debug/net9.0/testhost.dll --port 34975 --endpoint 127.0.0.1:034975 --role client --parentprocessid 4135 --telemetryoptedin false (dns block)
  • Triggering command: /usr/share/dotnet/dotnet /usr/share/dotnet/dotnet exec --runtimeconfig /home/REDACTED/work/SuperSocket.MySQL/SuperSocket.MySQL/tests/SuperSocket.MySQL.Test/bin/Debug/net9.0/SuperSocket.MySQL.Test.runtimeconfig.json --depsfile /home/REDACTED/work/SuperSocket.MySQL/SuperSocket.MySQL/tests/SuperSocket.MySQL.Test/bin/Debug/net9.0/SuperSocket.MySQL.Test.deps.json /home/REDACTED/work/SuperSocket.MySQL/SuperSocket.MySQL/tests/SuperSocket.MySQL.Test/bin/Debug/net9.0/testhost.dll --port 44301 --endpoint 127.0.0.1:044301 --role client --parentprocessid 4399 --telemetryoptedin false (dns block)
  • Triggering command: /usr/share/dotnet/dotnet /usr/share/dotnet/dotnet exec --runtimeconfig /home/REDACTED/work/SuperSocket.MySQL/SuperSocket.MySQL/tests/SuperSocket.MySQL.Test/bin/Debug/net9.0/SuperSocket.MySQL.Test.runtimeconfig.json --depsfile /home/REDACTED/work/SuperSocket.MySQL/SuperSocket.MySQL/tests/SuperSocket.MySQL.Test/bin/Debug/net9.0/SuperSocket.MySQL.Test.deps.json /home/REDACTED/work/SuperSocket.MySQL/SuperSocket.MySQL/tests/SuperSocket.MySQL.Test/bin/Debug/net9.0/testhost.dll --port 34369 --endpoint 127.0.0.1:034369 --role client --parentprocessid 4721 --telemetryoptedin false (dns block)

If you need me to access, download, or install something from one of these locations, you can either:

• Configure Actions setup steps to set up my environment, which run before the firewall is enabled
• Add the appropriate URLs or hosts to the custom allowlist in this repository's Copilot coding agent settings (admins only)

[kerryjiang]

I got the error "ERROR 1045 (28000): Access denied for user 'runner'@'localhost' (using password: NO)" from this line

[Copilot]

Fixed in e541db7 by using sudo mysql instead of mysql. On Ubuntu, the root MySQL user uses auth_socket by default, so sudo mysql can connect without credentials while mysql as the runner user cannot.

[kerryjiang]

I got the error "ERROR 1045 (28000): Access denied for user 'root'@'localhost' (using password: NO)" right now. Can we set auth type for root from ENV?

[Copilot]

Fixed in db4462f by switching to a MySQL Docker service container. This uses MYSQL_ROOT_PASSWORD: root env var to set the password directly, avoiding the auth_socket issues with Ubuntu's pre-installed MySQL. Also changed TestConst.Host to 127.0.0.1 for Docker compatibility.