Kristoffer Dalby aca11eae02 mapper: send a router all of its own routes ...

Its AllowedIPs held only the primaries the policy let it reach. It now
holds every approved route, and PrimaryRoutes the ones it serves.

2026-10-28 16:35:21 +00:00

..

api

api, policy/v2: refuse route prefixes with host bits

2026-10-28 16:35:21 +00:00

assets

assets: fix logo alignment and error icon centering

2026-04-13 17:23:47 +01:00

capver

capver: regenerate for Tailscale v1.104

2026-10-15 10:50:32 +02:00

db

db: bound the wait for a legacy hash verification slot

2026-10-28 16:35:21 +00:00

derp

derp/server: resolve the live DERP map in /bootstrap-dns

2026-10-07 11:10:38 +02:00

dns

hscontrol: replace autocert with certmagic

2026-10-18 20:53:18 +02:00

mapper

mapper: send a router all of its own routes

2026-10-28 16:35:21 +00:00

policy

policy: reduce merged destination prefixes to the node's own addresses

2026-10-28 16:35:21 +00:00

scope

db: reject unknown OAuth client scopes at creation (#3424)

2026-09-25 21:24:37 +02:00

servertest

mapper: send a router all of its own routes

2026-10-28 16:35:21 +00:00

state

policy, state: log only the routes auto-approval adds

2026-10-28 16:35:21 +00:00

templates

templates: apply the tvOS setup reorder to the served /apple page

2026-08-29 18:18:35 +02:00

testdata/apiv1_golden

test: add golden parity tests for the v1 API

2026-06-19 15:21:00 +02:00

types

policy/matcher, types: compare a node's routes to matchers as ranges

2026-10-28 16:35:21 +00:00

util

api, policy/v2: refuse route prefixes with host bits

2026-10-28 16:35:21 +00:00

apiv1_apikeys_test.go

test: add golden parity tests for the v1 API

2026-06-19 15:21:00 +02:00

apiv1_auth_test.go

test: add golden parity tests for the v1 API

2026-06-19 15:21:00 +02:00

apiv1_authmw_test.go

test: add golden parity tests for the v1 API

2026-06-19 15:21:00 +02:00

apiv1_client_test.go

gen/client/v1: add the generated HTTP client

2026-06-19 15:21:00 +02:00

apiv1_harness_test.go

test: add golden parity tests for the v1 API

2026-06-19 15:21:00 +02:00

apiv1_health_test.go

test: add golden parity tests for the v1 API

2026-06-19 15:21:00 +02:00

apiv1_nodes_test.go

hscontrol: refuse a key expiry that cannot be encoded

2026-10-28 14:25:41 +00:00

apiv1_policy_test.go

state: install a written policy only after it is stored

2026-10-28 16:35:21 +00:00

apiv1_preauthkeys_test.go

test: add golden parity tests for the v1 API

2026-06-19 15:21:00 +02:00

apiv1_socket_test.go

gen/client/v1: add the generated HTTP client

2026-06-19 15:21:00 +02:00

apiv1_users_test.go

test: add golden parity tests for the v1 API

2026-06-19 15:21:00 +02:00

apiv2_acl_test.go

state: install a written policy only after it is stored

2026-10-28 16:35:21 +00:00

apiv2_compat_test.go

policy/v2: label sshTests failures with the dst alias

2026-10-28 16:35:21 +00:00

apiv2_devices_test.go

api, policy/v2: refuse route prefixes with host bits

2026-10-28 16:35:21 +00:00

apiv2_keys_test.go

api/v2: add OAuth client-credentials auth and scope enforcement

2026-06-26 09:18:06 +02:00

apiv2_oauth_matrix_test.go

hscontrol, integration: test OAuth scope enforcement and the oauth-clients CLI

2026-06-26 09:18:06 +02:00

apiv2_oauth_test.go

policy/v2, servertest, hscontrol: add tailnet overlap route captures

2026-10-28 14:17:50 +00:00

apiv2_settings_test.go

mapper: send CertDomains and https cap when certificates are enabled

2026-10-18 20:53:18 +02:00

apiv2_users_test.go

hscontrol: contract-test the v2 users endpoint

2026-06-24 18:41:06 +02:00

app_test.go

hscontrol: replace autocert with certmagic

2026-10-18 20:53:18 +02:00

app_tls_test.go

hscontrol: replace autocert with certmagic

2026-10-18 20:53:18 +02:00

app.go

hscontrol: wait for map session cleanup during shutdown

2026-10-23 18:23:53 +02:00

auth_compat_test.go

hscontrol, servertest: fail on any unread pending login or expiry entry

2026-10-28 14:30:14 +00:00

auth_tags_test.go

state: do not expire tagged nodes on logout

2026-07-28 11:55:17 +02:00

auth_test.go

types, auth, noise: let one request wait on each auth session

2026-10-28 14:25:41 +00:00

auth.go

types, auth, noise: let one request wait on each auth session

2026-10-28 14:25:41 +00:00

debug.go

all: adopt slices helpers

2026-06-17 16:12:19 +02:00

handlers_test.go

hscontrol: admit DERP clients via NodeKey index

2026-10-07 22:55:03 +02:00

handlers.go

hscontrol, types: strip trailing slashes from server_url

2026-10-28 16:35:21 +00:00

metrics.go

metrics, policy/v2: drop unused scaffolding + nil-error returns

2026-05-19 09:55:22 +02:00

noise_test.go

types, auth, noise: let one request wait on each auth session

2026-10-28 14:25:41 +00:00

noise.go

poll: hold the map session's node as a view

2026-10-28 16:35:21 +00:00

oidc_confirm_test.go

all: annotate gosec false positives with rationale

2026-05-19 09:55:22 +02:00

oidc_cookiename_test.go

oidc: avoid slice panic in getCookieName for short values

2026-06-08 10:04:49 +02:00

oidc_template_test.go

oidc: render HTML error pages for browser-facing failures

2026-04-13 17:23:47 +01:00

oidc_test.go

oidc: keep email_verified with the address it came with

2026-10-28 14:25:41 +00:00

oidc.go

hscontrol, types: strip trailing slashes from server_url

2026-10-28 16:35:21 +00:00

platform_config_test.go

hscontrol: read Apple platform via chi.URLParam, not mux.Vars

2026-06-05 15:00:59 +02:00

platform_config.go

hscontrol: use the stdlib uuid package

2026-08-25 21:59:00 +02:00

poll_test.go

poll: hold the map session's node as a view

2026-10-28 16:35:21 +00:00

poll.go

poll: hold the map session's node as a view

2026-10-28 16:35:21 +00:00

realip_test.go

hscontrol: gate proxy header trust on trusted_proxies

2026-05-18 17:17:55 +02:00

realip.go

all: adopt slices helpers

2026-06-17 16:12:19 +02:00

tailsql.go

policy, mapper, capver, hscontrol: remove dead code

2026-06-17 16:12:19 +02:00

templates_consistency_test.go

Update links to Tailscale documentation

2026-04-18 09:33:41 +02:00