Kristoffer Dalby 361b5e6556 policy/v2: keep via steering bounded across route and user changes ...

Refresh clients when the last via grant disappears. Match each ACL once,
deduplicate routes, and elect once per route the peer actually serves.

2026-11-02 19:15:40 +01:00

..

api

hscontrol: bound pending authentication without evicting sessions

2026-10-29 20:51:50 +01:00

assets

assets: fix logo alignment and error icon centering

2026-04-13 17:23:47 +01:00

capver

capver: regenerate for Tailscale v1.104

2026-10-15 10:50:32 +02:00

db

hscontrol: arm ephemeral GC when a node registers with an auth key

2026-10-30 17:05:36 +01:00

derp

derp/server: resolve the live DERP map in /bootstrap-dns

2026-10-07 11:10:38 +02:00

dns

hscontrol: replace autocert with certmagic

2026-10-18 20:53:18 +02:00

mapper

mapper: count only the batcher's goroutines in lifecycle tests

2026-11-02 16:09:00 +01:00

policy

policy/v2: keep via steering bounded across route and user changes

2026-11-02 19:15:40 +01:00

scope

db: reject unknown OAuth client scopes at creation (#3424)

2026-09-25 21:24:37 +02:00

servertest

policy/v2: keep via steering bounded across route and user changes

2026-11-02 19:15:40 +01:00

state

state: serialise policy reloads

2026-11-02 19:15:40 +01:00

templates

templates: apply the tvOS setup reorder to the served /apple page

2026-08-29 18:18:35 +02:00

testdata/apiv1_golden

hscontrol: keep golden file names valid in Go module zips

2026-10-29 14:00:02 +01:00

types

hscontrol: bound pending authentication without evicting sessions

2026-10-29 20:51:50 +01:00

util

policyutil: match DstPorts as ranges when reducing filters

2026-10-23 18:23:53 +02:00

apiv1_apikeys_test.go

test: add golden parity tests for the v1 API

2026-06-19 15:21:00 +02:00

apiv1_auth_test.go

hscontrol: bound pending authentication without evicting sessions

2026-10-29 20:51:50 +01:00

apiv1_authmw_test.go

test: add golden parity tests for the v1 API

2026-06-19 15:21:00 +02:00

apiv1_client_test.go

gen/client/v1: add the generated HTTP client

2026-06-19 15:21:00 +02:00

apiv1_harness_test.go

hscontrol: keep golden file names valid in Go module zips

2026-10-29 14:00:02 +01:00

apiv1_health_test.go

test: add golden parity tests for the v1 API

2026-06-19 15:21:00 +02:00

apiv1_nodes_test.go

hscontrol: bound pending authentication without evicting sessions

2026-10-29 20:51:50 +01:00

apiv1_policy_test.go

test: add golden parity tests for the v1 API

2026-06-19 15:21:00 +02:00

apiv1_preauthkeys_test.go

test: add golden parity tests for the v1 API

2026-06-19 15:21:00 +02:00

apiv1_socket_test.go

gen/client/v1: add the generated HTTP client

2026-06-19 15:21:00 +02:00

apiv1_users_test.go

test: add golden parity tests for the v1 API

2026-06-19 15:21:00 +02:00

apiv2_acl_test.go

api/v2: add the acl/validate endpoint

2026-10-29 11:04:05 +01:00

apiv2_compat_test.go

hscontrol, servertest: add key list scope golden data

2026-11-02 16:09:00 +01:00

apiv2_devices_test.go

policy/v2, servertest, hscontrol: add tailnet overlap route captures

2026-10-29 14:00:02 +01:00

apiv2_keys_test.go

api/v2: add OAuth client-credentials auth and scope enforcement

2026-06-26 09:18:06 +02:00

apiv2_oauth_matrix_test.go

hscontrol, integration: test OAuth scope enforcement and the oauth-clients CLI

2026-06-26 09:18:06 +02:00

apiv2_oauth_test.go

policy/v2, servertest, hscontrol: add tailnet overlap route captures

2026-10-29 14:00:02 +01:00

apiv2_settings_test.go

mapper: send CertDomains and https cap when certificates are enabled

2026-10-18 20:53:18 +02:00

apiv2_users_test.go

hscontrol: contract-test the v2 users endpoint

2026-06-24 18:41:06 +02:00

app_test.go

hscontrol: replace autocert with certmagic

2026-10-18 20:53:18 +02:00

app_tls_test.go

hscontrol: replace autocert with certmagic

2026-10-18 20:53:18 +02:00

app.go

hscontrol: keep a re-keyed node from its stale ephemeral GC timer

2026-10-30 17:05:36 +01:00

auth_compat_test.go

hscontrol, servertest: fail on any unread pending login or expiry entry

2026-11-02 16:09:00 +01:00

auth_tags_test.go

hscontrol: bound pending authentication without evicting sessions

2026-10-29 20:51:50 +01:00

auth_test.go

hscontrol: bound pending authentication without evicting sessions

2026-10-29 20:51:50 +01:00

auth.go

hscontrol: arm ephemeral GC when a node registers with an auth key

2026-10-30 17:05:36 +01:00

debug.go

all: adopt slices helpers

2026-06-17 16:12:19 +02:00

handlers_test.go

hscontrol: admit DERP clients via NodeKey index

2026-10-07 22:55:03 +02:00

handlers.go

hscontrol: admit DERP clients via NodeKey index

2026-10-07 22:55:03 +02:00

metrics.go

metrics, policy/v2: drop unused scaffolding + nil-error returns

2026-05-19 09:55:22 +02:00

noise_test.go

hscontrol: bound pending authentication without evicting sessions

2026-10-29 20:51:50 +01:00

noise.go

hscontrol: bound pending authentication without evicting sessions

2026-10-29 20:51:50 +01:00

oidc_confirm_test.go

hscontrol: bound pending authentication without evicting sessions

2026-10-29 20:51:50 +01:00

oidc_cookiename_test.go

oidc: avoid slice panic in getCookieName for short values

2026-06-08 10:04:49 +02:00

oidc_template_test.go

oidc: render HTML error pages for browser-facing failures

2026-04-13 17:23:47 +01:00

oidc_test.go

hscontrol: remove unused OIDC user change result

2026-10-29 20:51:50 +01:00

oidc.go

hscontrol: remove unused OIDC user change result

2026-10-29 20:51:50 +01:00

platform_config_test.go

hscontrol: read Apple platform via chi.URLParam, not mux.Vars

2026-06-05 15:00:59 +02:00

platform_config.go

hscontrol: use the stdlib uuid package

2026-08-25 21:59:00 +02:00

poll_test.go

hscontrol: keep a re-keyed node from its stale ephemeral GC timer

2026-10-30 17:05:36 +01:00

poll.go

hscontrol: wait for map session cleanup during shutdown

2026-10-23 18:23:53 +02:00

realip_test.go

hscontrol: gate proxy header trust on trusted_proxies

2026-05-18 17:17:55 +02:00

realip.go

all: adopt slices helpers

2026-06-17 16:12:19 +02:00

tailsql.go

policy, mapper, capver, hscontrol: remove dead code

2026-06-17 16:12:19 +02:00

templates_consistency_test.go

Update links to Tailscale documentation

2026-04-18 09:33:41 +02:00