headscale

public/headscale

Fork 0

mirror of https://github.com/juanfont/headscale.git synced 2025-11-24 09:10:42 +09:00

Files

History

Fredrik Ekre 5d8a2c25ea

Build / build-nix (push) Has been cancelled

Details

Build / build-cross (GOARCH=amd64 GOOS=darwin) (push) Has been cancelled

Details

Build / build-cross (GOARCH=amd64 GOOS=linux) (push) Has been cancelled

Details

Build / build-cross (GOARCH=arm64 GOOS=darwin) (push) Has been cancelled

Details

Build / build-cross (GOARCH=arm64 GOOS=linux) (push) Has been cancelled

Details

Check Generated Files / check-generated (push) Has been cancelled

Details

Tests / test (push) Has been cancelled

Details

Close inactive issues / close-issues (push) Has been cancelled

Details

OIDC: Query userinfo endpoint before verifying user

This patch includes some changes to the OIDC integration in particular:
 - Make sure that userinfo claims are queried *before* comparing the
   user with the configured allowed groups, email and email domain.
 - Update user with group claim from the userinfo endpoint which is
   required for allowed groups to work correctly. This is essentially a
   continuation of #2545.
 - Let userinfo claims take precedence over id token claims.

With these changes I have verified that Headscale works as expected
together with Authelia without the documented escape hatch [0], i.e.
everything works even if the id token only contain the iss and sub
claims.

[0]: https://www.authelia.com/integration/openid-connect/headscale/#configuration-escape-hatch

2025-08-11 17:51:16 +02:00

change

mapper: produce map before poll (#2628 )

2025-07-28 11:15:53 +02:00

testdata

Restore support for "Override local DNS" (#2438 )

2025-04-17 17:16:59 +02:00

api_key.go

Split code into modules

2023-05-26 12:24:50 +02:00

common_test.go

mapper: produce map before poll (#2628 )