Kristoffer Dalby 957a332d5d policy/v2: match the login user in SSHCheckParams ...

The client picks the check rule by login user; the server took the
first rule for the node pair, so a root login could get a 12h
localpart period instead of "always", or be approved after its rule
was removed while another user's rule remained. Hold URLs now carry
the concrete user: tailssh never expanded the encoded $LOCAL_USER.

Updates #3508

2026-10-08 10:29:23 +02:00

..

matcher

all: inline deprecated tailcfg capability aliases

2026-08-25 21:59:00 +02:00

policyutil

policyutil: send approved exit nodes every rule

2026-09-30 17:20:46 +02:00

v2

policy/v2: match the login user in SSHCheckParams

2026-10-08 10:29:23 +02:00

pm.go

policy/v2: match the login user in SSHCheckParams

2026-10-08 10:29:23 +02:00

policy_autoapprove_test.go

all: apply golangci-lint autofixes

2026-08-25 21:59:00 +02:00

policy_route_approval_test.go

all: apply golangci-lint autofixes

2026-08-25 21:59:00 +02:00

policy_test.go

policy/v2: send an empty SSH policy when no rule applies

2026-10-08 10:29:23 +02:00

policy.go

mapper: take peer visibility from the peer map only

2026-09-23 14:48:35 +02:00

route_approval_test.go

all: apply golangci-lint autofixes

2026-08-25 21:59:00 +02:00