Local auth renew proxy

proxy/src/bin/auth_renew_router.rs

@@ -20,7 +20,7 @@ use tracing::{error, info, warn};
 project_git_version!(GIT_VERSION);
 
 fn cli() -> clap::Command {
-    clap::Command::new("Neon proxy/router")
+    clap::Command::new("Auth renew proxy")
         .disable_help_flag(true)
         .version(GIT_VERSION)
         .arg(
@@ -148,6 +148,9 @@ async fn handle_client(
         None => return Ok(()), // it's a cancellation request
     };
 
+    // Here we force plain test auth for the client and using received password to authenticate
+    // to the destination server. Instead we can always trust the client and take the password / JWT
+    // each time we get a connection.
     let password = AuthFlow::new(&mut stream)
         .begin(auth::CleartextPassword)
         .await?