policy/v2: trim whitespace and reject negative checkPeriod

Browse Source

SaaS trims leading whitespace in action and per-user entries before
matching, so headscale does too. Reject negative checkPeriod with
"must be a positive duration" matching SaaS body. The 168h upper
bound is inclusive.

...

This commit is contained in:

Kristoffer Dalby

2026-05-13 08:17:11 +00:00

parent 2180380fc1

commit f8aa6c46ef

12 changed files with 201130 additions and 7 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download Patch File Download Diff File Expand all files Collapse all files

hscontrol/policy/v2/testdata/ssh_results/ssh-malformed-acceptenv-glob-shapes.hujson

Vendored

+20105

File diff suppressed because it is too large Load Diff

hscontrol/policy/v2/testdata/ssh_results/ssh-malformed-action-mixedcase.hujson

Vendored

+20081

File diff suppressed because it is too large Load Diff

hscontrol/policy/v2/testdata/ssh_results/ssh-malformed-action-uppercase.hujson

Vendored

+20081

File diff suppressed because it is too large Load Diff

hscontrol/policy/v2/testdata/ssh_results/ssh-malformed-action-whitespace.hujson

Vendored

+20104

File diff suppressed because it is too large Load Diff

hscontrol/policy/v2/testdata/ssh_results/ssh-malformed-checkperiod-exact-max.hujson

Vendored

+20099

File diff suppressed because it is too large Load Diff

hscontrol/policy/v2/testdata/ssh_results/ssh-malformed-checkperiod-negative.hujson

Vendored

+20082

File diff suppressed because it is too large Load Diff

hscontrol/policy/v2/testdata/ssh_results/ssh-malformed-checkperiod-over-max-by-1s.hujson

Vendored

+20082

File diff suppressed because it is too large Load Diff

hscontrol/policy/v2/testdata/ssh_results/ssh-malformed-user-whitespace-leading.hujson

Vendored

+20104

File diff suppressed because it is too large Load Diff

hscontrol/policy/v2/testdata/ssh_results/ssh-malformed-users-mixed-valid-empty.hujson

Vendored

+20081

File diff suppressed because it is too large Load Diff

hscontrol/policy/v2/testdata/ssh_results/ssh-malformed-users-mixed-valid-wildcard.hujson

Vendored

+20081

File diff suppressed because it is too large Load Diff