Kristoffer Dalby 571e4476ca policy/v2: resolve an ACL's sources once for all its destinations ...

An ACL compiles to one grant per destination, and each resolved and
rendered the same sources. ViaRoutesForPeer only needs one grant per
ACL.

2026-10-27 21:32:32 +00:00

..

api

mapper: send CertDomains and https cap when certificates are enabled

2026-10-18 20:53:18 +02:00

assets

assets: fix logo alignment and error icon centering

2026-04-13 17:23:47 +01:00

capver

capver: regenerate for Tailscale v1.104

2026-10-15 10:50:32 +02:00

db

db: quote postgres connection parameters (#3477)

2026-10-22 22:36:04 +02:00

derp

derp/server: resolve the live DERP map in /bootstrap-dns

2026-10-07 11:10:38 +02:00

dns

hscontrol: replace autocert with certmagic

2026-10-18 20:53:18 +02:00

mapper

policy/v2, mapper: add nextdns attr captures

2026-10-27 21:30:36 +00:00

policy

policy/v2: resolve an ACL's sources once for all its destinations

2026-10-27 21:32:32 +00:00

scope

db: reject unknown OAuth client scopes at creation (#3424)

2026-09-25 21:24:37 +02:00

servertest

policy/v2: refresh clients when a user change drops the last via grant

2026-10-27 21:32:32 +00:00

state

state: serialise policy reloads

2026-10-27 21:32:32 +00:00

templates

templates: apply the tvOS setup reorder to the served /apple page

2026-08-29 18:18:35 +02:00

testdata/apiv1_golden

test: add golden parity tests for the v1 API

2026-06-19 15:21:00 +02:00

types

testcapture: record multi-step captures and API error detail

2026-10-27 14:15:01 +00:00

util

policyutil: match DstPorts as ranges when reducing filters

2026-10-23 18:23:53 +02:00

apiv1_apikeys_test.go

test: add golden parity tests for the v1 API

2026-06-19 15:21:00 +02:00

apiv1_auth_test.go

test: add golden parity tests for the v1 API

2026-06-19 15:21:00 +02:00

apiv1_authmw_test.go

test: add golden parity tests for the v1 API

2026-06-19 15:21:00 +02:00

apiv1_client_test.go

gen/client/v1: add the generated HTTP client

2026-06-19 15:21:00 +02:00

apiv1_harness_test.go

test: add golden parity tests for the v1 API

2026-06-19 15:21:00 +02:00

apiv1_health_test.go

test: add golden parity tests for the v1 API

2026-06-19 15:21:00 +02:00

apiv1_nodes_test.go

policy/v2, servertest, hscontrol: add tailnet overlap route captures

2026-10-27 21:30:36 +00:00

apiv1_policy_test.go

test: add golden parity tests for the v1 API

2026-06-19 15:21:00 +02:00

apiv1_preauthkeys_test.go

test: add golden parity tests for the v1 API

2026-06-19 15:21:00 +02:00

apiv1_socket_test.go

gen/client/v1: add the generated HTTP client

2026-06-19 15:21:00 +02:00

apiv1_users_test.go

test: add golden parity tests for the v1 API

2026-06-19 15:21:00 +02:00

apiv2_acl_test.go

policy/v2: keep comments in a policy set through the v2 API

2026-10-15 13:28:12 +02:00

apiv2_compat_test.go

hscontrol, servertest: add key list scope golden data

2026-10-27 21:31:36 +00:00

apiv2_devices_test.go

policy/v2, servertest, hscontrol: add tailnet overlap route captures

2026-10-27 21:30:36 +00:00

apiv2_keys_test.go

api/v2: add OAuth client-credentials auth and scope enforcement

2026-06-26 09:18:06 +02:00

apiv2_oauth_matrix_test.go

hscontrol, integration: test OAuth scope enforcement and the oauth-clients CLI

2026-06-26 09:18:06 +02:00

apiv2_oauth_test.go

policy/v2, servertest, hscontrol: add tailnet overlap route captures

2026-10-27 21:30:36 +00:00

apiv2_settings_test.go

mapper: send CertDomains and https cap when certificates are enabled

2026-10-18 20:53:18 +02:00

apiv2_users_test.go

hscontrol: contract-test the v2 users endpoint

2026-06-24 18:41:06 +02:00

app_test.go

hscontrol: replace autocert with certmagic

2026-10-18 20:53:18 +02:00

app_tls_test.go

hscontrol: replace autocert with certmagic

2026-10-18 20:53:18 +02:00

app.go

hscontrol: wait for map session cleanup during shutdown

2026-10-23 18:23:53 +02:00

auth_compat_test.go

hscontrol, servertest: fail on any unread pending login or expiry entry

2026-10-27 21:31:35 +00:00

auth_tags_test.go

state: do not expire tagged nodes on logout

2026-07-28 11:55:17 +02:00

auth_test.go

state: send a relogin as a whole node unless only its keys changed

2026-10-09 11:44:37 +02:00

auth.go

state: keep node removal apart from policy refresh in DeleteNode

2026-09-30 19:03:13 +02:00

debug.go

all: adopt slices helpers

2026-06-17 16:12:19 +02:00

handlers_test.go

hscontrol: admit DERP clients via NodeKey index

2026-10-07 22:55:03 +02:00

handlers.go

hscontrol: admit DERP clients via NodeKey index

2026-10-07 22:55:03 +02:00

metrics.go

metrics, policy/v2: drop unused scaffolding + nil-error returns

2026-05-19 09:55:22 +02:00

noise_test.go

noise: implement /machine/set-dns

2026-10-18 20:53:18 +02:00

noise.go

noise: implement /machine/set-dns

2026-10-18 20:53:18 +02:00

oidc_confirm_test.go

all: annotate gosec false positives with rationale

2026-05-19 09:55:22 +02:00

oidc_cookiename_test.go

oidc: avoid slice panic in getCookieName for short values

2026-06-08 10:04:49 +02:00

oidc_template_test.go

oidc: render HTML error pages for browser-facing failures

2026-04-13 17:23:47 +01:00

oidc_test.go

state: stop the auth cache TTL sweeper on Close

2026-10-23 18:23:53 +02:00

oidc.go

state: refresh policy nodes inside the peer map build

2026-09-30 17:21:02 +02:00

platform_config_test.go

hscontrol: read Apple platform via chi.URLParam, not mux.Vars

2026-06-05 15:00:59 +02:00

platform_config.go

hscontrol: use the stdlib uuid package

2026-08-25 21:59:00 +02:00

poll_test.go

mapper: retry slow sessions from current state

2026-10-23 18:23:53 +02:00

poll.go

hscontrol: wait for map session cleanup during shutdown

2026-10-23 18:23:53 +02:00

realip_test.go

hscontrol: gate proxy header trust on trusted_proxies

2026-05-18 17:17:55 +02:00

realip.go

all: adopt slices helpers

2026-06-17 16:12:19 +02:00

tailsql.go

policy, mapper, capver, hscontrol: remove dead code

2026-06-17 16:12:19 +02:00

templates_consistency_test.go

Update links to Tailscale documentation

2026-04-18 09:33:41 +02:00