Kristoffer Dalby 15a8c7584e hscontrol: refuse a key expiry that cannot be encoded ...

handleRegister, the OIDC auth path and SetNodeExpiry refuse it. Expiries
are stored in UTC, which SQLite can read back, and loaded in UTC, as
PostgreSQL returns the server's zone. The v1 API answers 400.

Fixes ANT-2026-QMCAFJ1Q

2026-10-29 14:00:02 +01:00

..

auth_cache_test.go

state: stop the auth cache TTL sweeper on Close

2026-10-23 18:23:53 +02:00

auth_nodekey_binding_test.go

state: add regression test for NodeKey-rotation binding

2026-06-17 16:12:19 +02:00

auth_tagged_expiry_test.go

state: give another user's key on a tagged machine a new device

2026-10-29 14:00:02 +01:00

autoapprove_test.go

state: batch route auto-approval into one policy rebuild

2026-06-08 10:04:49 +02:00

connect_test.go

state: backfill only IPs into NodeStore

2026-10-07 11:10:38 +02:00

debug_test.go

hscontrol/state: make NodeStore batch configuration tunable (#2886)

2025-11-28 16:38:29 +01:00

debug.go

build: update tailscale.com to v1.103.0-pre.0.20260819232550-0e84b4a3a0a0

2026-08-25 21:59:00 +02:00

endpoint_test.go

state: classify map requests before broadcasting

2026-09-10 13:06:13 +02:00

ephemeral_test.go

db: store all credentials in one SHA-256-hashed table

2026-09-26 00:33:12 +02:00

ha_health.go

state: consolidate route-election and node helpers

2026-06-17 16:12:19 +02:00

maprequest_test.go

state: own request memory before storing nodes

2026-10-23 18:23:53 +02:00

maprequest.go

state: compare peer-visible Hostinfo through views

2026-10-09 11:44:37 +02:00

node_health_test.go

mapper: skip peers whose key expiry cannot be encoded

2026-10-29 14:00:02 +01:00

node_health.go

mapper: skip peers whose key expiry cannot be encoded

2026-10-29 14:00:02 +01:00

node_store_hostname_test.go

state: lowercase renames and refresh self DNS config on rename

2026-10-18 20:53:18 +02:00

node_store_stop_test.go

state: signal NodeStore shutdown without closing writeQueue

2026-06-08 10:04:49 +02:00

node_store_test.go

state: skip the caller's policy refresh once the writer applied it

2026-10-23 18:23:53 +02:00

node_store.go

state: lowercase renames and refresh self DNS config on rename

2026-10-18 20:53:18 +02:00

persist_clobber_test.go

state: refresh policy nodes inside the peer map build

2026-09-30 17:21:02 +02:00

persist_test.go

hscontrol: refuse a key expiry that cannot be encoded

2026-10-29 14:00:02 +01:00

ping_test.go

all: use sync.WaitGroup.Go

2026-08-25 21:59:00 +02:00

ping.go

util, db: generate key material as hex via tailscale rands

2026-06-17 16:12:19 +02:00

primaries_property_test.go

state, servertest: property-test HA election + invariant catalogue

2026-05-18 17:18:08 +02:00

primaries_test.go

state, servertest: property-test HA election + invariant catalogue

2026-05-18 17:18:08 +02:00

reload_policy_test.go

state: rebuild peer maps in ReloadPolicy only when the policy changed

2026-10-18 13:18:48 +02:00

rename_test.go

state: reject renames whose FQDN exceeds the hostname limit

2026-07-01 15:19:08 +02:00

ssh_check_test.go

all: use sync.WaitGroup.Go

2026-08-25 21:59:00 +02:00

state.go

hscontrol: refuse a key expiry that cannot be encoded

2026-10-29 14:00:02 +01:00

tags.go

all: apply godoc [Name] link conventions across comments

2026-05-19 09:55:22 +02:00

test_helpers.go

all: apply godoc [Name] link conventions across comments

2026-05-19 09:55:22 +02:00