Kristoffer Dalby 5401edb6a8 policy: ignore '#' metadata fields across the whole policy ...

The filter lived in ACL.UnmarshalJSON, so grants, ssh and nodeAttrs still
hit RejectUnknownMembers. Strip the members in the HuJSON AST instead, at
the single decode entrypoint. Grant "app" payloads are left untouched.

Fixes #3479

2026-09-23 09:30:22 +02:00

..

api

state: preserve committed node deletion changes

2026-09-09 18:18:17 +02:00

assets

assets: fix logo alignment and error icon centering

2026-04-13 17:23:47 +01:00

capver

capver: regenerate for Tailscale v1.102

2026-08-25 21:59:00 +02:00

db

all: apply golangci-lint autofixes

2026-08-25 21:59:00 +02:00

derp

build: update tailscale.com to v1.103.0-pre.0.20260819232550-0e84b4a3a0a0

2026-08-25 21:59:00 +02:00

dns

dns: cancel extra-records retry on shutdown and close watcher on setup error

2026-09-04 11:35:45 +02:00

mapper

state: resolve changed peers through adjacency

2026-09-10 13:06:13 +02:00

policy

policy: ignore '#' metadata fields across the whole policy

2026-09-23 09:30:22 +02:00

scope

api/v2: add OAuth client-credentials auth and scope enforcement

2026-06-26 09:18:06 +02:00

servertest

state: mark expired nodes offline without ending the session

2026-09-23 09:23:51 +02:00

state

state: mark expired nodes offline without ending the session

2026-09-23 09:23:51 +02:00

templates

templates: apply the tvOS setup reorder to the served /apple page

2026-08-29 18:18:35 +02:00

testdata/apiv1_golden

test: add golden parity tests for the v1 API

2026-06-19 15:21:00 +02:00

types

types: regenerate node view

2026-09-23 09:23:51 +02:00

util

build: update tailscale.com to v1.103.0-pre.0.20260819232550-0e84b4a3a0a0

2026-08-25 21:59:00 +02:00

apiv1_apikeys_test.go

test: add golden parity tests for the v1 API

2026-06-19 15:21:00 +02:00

apiv1_auth_test.go

test: add golden parity tests for the v1 API

2026-06-19 15:21:00 +02:00

apiv1_authmw_test.go

test: add golden parity tests for the v1 API

2026-06-19 15:21:00 +02:00

apiv1_client_test.go

gen/client/v1: add the generated HTTP client

2026-06-19 15:21:00 +02:00

apiv1_harness_test.go

test: add golden parity tests for the v1 API

2026-06-19 15:21:00 +02:00

apiv1_health_test.go

test: add golden parity tests for the v1 API

2026-06-19 15:21:00 +02:00

apiv1_nodes_test.go

test: add golden parity tests for the v1 API

2026-06-19 15:21:00 +02:00

apiv1_policy_test.go

test: add golden parity tests for the v1 API

2026-06-19 15:21:00 +02:00

apiv1_preauthkeys_test.go

test: add golden parity tests for the v1 API

2026-06-19 15:21:00 +02:00

apiv1_socket_test.go

gen/client/v1: add the generated HTTP client

2026-06-19 15:21:00 +02:00

apiv1_users_test.go

test: add golden parity tests for the v1 API

2026-06-19 15:21:00 +02:00

apiv2_acl_test.go

hscontrol: add v2 API contract tests

2026-06-21 04:17:03 +02:00

apiv2_devices_test.go

hscontrol: add v2 API contract tests

2026-06-21 04:17:03 +02:00

apiv2_keys_test.go

api/v2: add OAuth client-credentials auth and scope enforcement

2026-06-26 09:18:06 +02:00

apiv2_oauth_matrix_test.go

hscontrol, integration: test OAuth scope enforcement and the oauth-clients CLI

2026-06-26 09:18:06 +02:00

apiv2_oauth_test.go

hscontrol, integration: test OAuth scope enforcement and the oauth-clients CLI

2026-06-26 09:18:06 +02:00

apiv2_settings_test.go

hscontrol: collapse key and settings asserts into cmp.Diff

2026-06-24 18:41:06 +02:00

apiv2_users_test.go

hscontrol: contract-test the v2 users endpoint

2026-06-24 18:41:06 +02:00

app_test.go

hscontrol: keep the ACME error body readable in acmeLogger

2026-09-15 14:37:20 +02:00

app.go

hscontrol: keep the ACME error body readable in acmeLogger

2026-09-15 14:37:20 +02:00

auth_tags_test.go

state: do not expire tagged nodes on logout

2026-07-28 11:55:17 +02:00

auth_test.go

state: rename persist helpers to say what they do

2026-09-10 13:06:13 +02:00

auth.go

state: preserve committed node deletion changes

2026-09-09 18:18:17 +02:00

debug.go

all: adopt slices helpers

2026-06-17 16:12:19 +02:00

handlers_test.go

oidc: harden reloadable confirmation flow

2026-09-09 19:01:43 +02:00

handlers.go

oidc: harden reloadable confirmation flow

2026-09-09 19:01:43 +02:00

metrics.go

metrics, policy/v2: drop unused scaffolding + nil-error returns

2026-05-19 09:55:22 +02:00

noise_test.go

noise: make deleted-node expiry clock independent

2026-09-09 18:18:17 +02:00

noise.go

noise: make deleted-node expiry clock independent

2026-09-09 18:18:17 +02:00

oidc_confirm_test.go

all: annotate gosec false positives with rationale

2026-05-19 09:55:22 +02:00

oidc_cookiename_test.go

oidc: avoid slice panic in getCookieName for short values

2026-06-08 10:04:49 +02:00

oidc_template_test.go

oidc: render HTML error pages for browser-facing failures

2026-04-13 17:23:47 +01:00

oidc_test.go

oidc: harden reloadable confirmation flow

2026-09-09 19:01:43 +02:00

oidc.go

oidc: harden reloadable confirmation flow

2026-09-09 19:01:43 +02:00

platform_config_test.go

hscontrol: read Apple platform via chi.URLParam, not mux.Vars

2026-06-05 15:00:59 +02:00

platform_config.go

hscontrol: use the stdlib uuid package

2026-08-25 21:59:00 +02:00

poll_test.go

poll: interrupt blocked map writes

2026-09-09 18:18:17 +02:00

poll.go

state: mark expired nodes offline without ending the session

2026-09-23 09:23:51 +02:00

realip_test.go

hscontrol: gate proxy header trust on trusted_proxies

2026-05-18 17:17:55 +02:00

realip.go

all: adopt slices helpers

2026-06-17 16:12:19 +02:00

tailsql.go

policy, mapper, capver, hscontrol: remove dead code

2026-06-17 16:12:19 +02:00

templates_consistency_test.go

Update links to Tailscale documentation

2026-04-18 09:33:41 +02:00