Kristoffer Dalby 524ccc46aa db: keep only the current policy ...

Every write inserted a row and nothing deleted one, while every reader
takes only the newest. Writers store and install under one lock, so an
uncommitted insert cannot outlive the newer row that pruned the rest.

2026-10-28 14:37:08 +00:00

..

api

state: install a written policy only after it is stored

2026-10-28 14:37:07 +00:00

assets

assets: fix logo alignment and error icon centering

2026-04-13 17:23:47 +01:00

capver

capver: regenerate for Tailscale v1.104

2026-10-15 10:50:32 +02:00

db

db: keep only the current policy

2026-10-28 14:37:08 +00:00

derp

derp/server: resolve the live DERP map in /bootstrap-dns

2026-10-07 11:10:38 +02:00

dns

hscontrol: replace autocert with certmagic

2026-10-18 20:53:18 +02:00

mapper

policy/v2, mapper: add nextdns attr captures

2026-10-28 14:29:30 +00:00

policy

policy/v2: refuse an empty policy

2026-10-28 14:37:06 +00:00

scope

db: reject unknown OAuth client scopes at creation (#3424)

2026-09-25 21:24:37 +02:00

servertest

policy/v2: refresh clients when a user change drops the last via grant

2026-10-28 14:36:58 +00:00

state

db: keep only the current policy

2026-10-28 14:37:08 +00:00

templates

templates: apply the tvOS setup reorder to the served /apple page

2026-08-29 18:18:35 +02:00

testdata/apiv1_golden

test: add golden parity tests for the v1 API

2026-06-19 15:21:00 +02:00

types

types, auth, noise: let one request wait on each auth session

2026-10-28 14:25:41 +00:00

util

policyutil: match DstPorts as ranges when reducing filters

2026-10-23 18:23:53 +02:00

apiv1_apikeys_test.go

test: add golden parity tests for the v1 API

2026-06-19 15:21:00 +02:00

apiv1_auth_test.go

test: add golden parity tests for the v1 API

2026-06-19 15:21:00 +02:00

apiv1_authmw_test.go

test: add golden parity tests for the v1 API

2026-06-19 15:21:00 +02:00

apiv1_client_test.go

gen/client/v1: add the generated HTTP client

2026-06-19 15:21:00 +02:00

apiv1_harness_test.go

test: add golden parity tests for the v1 API

2026-06-19 15:21:00 +02:00

apiv1_health_test.go

test: add golden parity tests for the v1 API

2026-06-19 15:21:00 +02:00

apiv1_nodes_test.go

hscontrol: refuse a key expiry that cannot be encoded

2026-10-28 14:25:41 +00:00

apiv1_policy_test.go

state: install a written policy only after it is stored

2026-10-28 14:37:07 +00:00

apiv1_preauthkeys_test.go

test: add golden parity tests for the v1 API

2026-06-19 15:21:00 +02:00

apiv1_socket_test.go

gen/client/v1: add the generated HTTP client

2026-06-19 15:21:00 +02:00

apiv1_users_test.go

test: add golden parity tests for the v1 API

2026-06-19 15:21:00 +02:00

apiv2_acl_test.go

state: install a written policy only after it is stored

2026-10-28 14:37:07 +00:00

apiv2_compat_test.go

policy/v2: refuse an empty policy

2026-10-28 14:37:06 +00:00

apiv2_devices_test.go

policy/v2, servertest, hscontrol: add tailnet overlap route captures

2026-10-28 14:17:50 +00:00

apiv2_keys_test.go

api/v2: add OAuth client-credentials auth and scope enforcement

2026-06-26 09:18:06 +02:00

apiv2_oauth_matrix_test.go

hscontrol, integration: test OAuth scope enforcement and the oauth-clients CLI

2026-06-26 09:18:06 +02:00

apiv2_oauth_test.go

policy/v2, servertest, hscontrol: add tailnet overlap route captures

2026-10-28 14:17:50 +00:00

apiv2_settings_test.go

mapper: send CertDomains and https cap when certificates are enabled

2026-10-18 20:53:18 +02:00

apiv2_users_test.go

hscontrol: contract-test the v2 users endpoint

2026-06-24 18:41:06 +02:00

app_test.go

hscontrol: replace autocert with certmagic

2026-10-18 20:53:18 +02:00

app_tls_test.go

hscontrol: replace autocert with certmagic

2026-10-18 20:53:18 +02:00

app.go

hscontrol: wait for map session cleanup during shutdown

2026-10-23 18:23:53 +02:00

auth_compat_test.go

hscontrol, servertest: fail on any unread pending login or expiry entry

2026-10-28 14:30:14 +00:00

auth_tags_test.go

state: do not expire tagged nodes on logout

2026-07-28 11:55:17 +02:00

auth_test.go

types, auth, noise: let one request wait on each auth session

2026-10-28 14:25:41 +00:00

auth.go

types, auth, noise: let one request wait on each auth session

2026-10-28 14:25:41 +00:00

debug.go

all: adopt slices helpers

2026-06-17 16:12:19 +02:00

handlers_test.go

hscontrol: admit DERP clients via NodeKey index

2026-10-07 22:55:03 +02:00

handlers.go

hscontrol: admit DERP clients via NodeKey index

2026-10-07 22:55:03 +02:00

metrics.go

metrics, policy/v2: drop unused scaffolding + nil-error returns

2026-05-19 09:55:22 +02:00

noise_test.go

types, auth, noise: let one request wait on each auth session

2026-10-28 14:25:41 +00:00

noise.go

types, auth, noise: let one request wait on each auth session

2026-10-28 14:25:41 +00:00

oidc_confirm_test.go

all: annotate gosec false positives with rationale

2026-05-19 09:55:22 +02:00

oidc_cookiename_test.go

oidc: avoid slice panic in getCookieName for short values

2026-06-08 10:04:49 +02:00

oidc_template_test.go

oidc: render HTML error pages for browser-facing failures

2026-04-13 17:23:47 +01:00

oidc_test.go

oidc: keep email_verified with the address it came with

2026-10-28 14:25:41 +00:00

oidc.go

oidc: keep email_verified with the address it came with

2026-10-28 14:25:41 +00:00

platform_config_test.go

hscontrol: read Apple platform via chi.URLParam, not mux.Vars

2026-06-05 15:00:59 +02:00

platform_config.go

hscontrol: use the stdlib uuid package

2026-08-25 21:59:00 +02:00

poll_test.go

mapper: retry slow sessions from current state

2026-10-23 18:23:53 +02:00

poll.go

hscontrol: wait for map session cleanup during shutdown

2026-10-23 18:23:53 +02:00

realip_test.go

hscontrol: gate proxy header trust on trusted_proxies

2026-05-18 17:17:55 +02:00

realip.go

all: adopt slices helpers

2026-06-17 16:12:19 +02:00

tailsql.go

policy, mapper, capver, hscontrol: remove dead code

2026-06-17 16:12:19 +02:00

templates_consistency_test.go

Update links to Tailscale documentation

2026-04-18 09:33:41 +02:00