Kristoffer Dalby d84dabcbda db: keep at most 1000 access tokens per OAuth client ...

Minting needs only the client secret, whatever its scopes, and
added one row per mint. Each mint now ends tokens past the newest 1000.

2026-10-30 14:55:37 +00:00

..

api

db: keep at most 1000 access tokens per OAuth client

2026-10-30 14:55:37 +00:00

assets

assets: fix logo alignment and error icon centering

2026-04-13 17:23:47 +01:00

capver

capver: regenerate for Tailscale v1.104

2026-10-15 10:50:32 +02:00

db

db: keep at most 1000 access tokens per OAuth client

2026-10-30 14:55:37 +00:00

derp

derp/server: resolve the live DERP map in /bootstrap-dns

2026-10-07 11:10:38 +02:00

dns

hscontrol: replace autocert with certmagic

2026-10-18 20:53:18 +02:00

mapper

change: do not echo a node's own report back to it

2026-10-30 14:55:37 +00:00

policy

policy/v2: match no user for a bare "@" token

2026-10-30 14:55:37 +00:00

scope

db: reject unknown OAuth client scopes at creation (#3424)

2026-09-25 21:24:37 +02:00

servertest

api/v2: stop echoing request values in error responses

2026-10-30 14:55:37 +00:00

state

policy/v2: match no one for an ambiguous user outside policy writes

2026-10-30 14:55:37 +00:00

templates

oidc: show requested tags on the registration confirmation page

2026-10-30 14:55:37 +00:00

testdata/apiv1_golden

db, state: keep the ephemeral flag a node was created with

2026-10-30 14:55:37 +00:00

types

types: accept only lowercase hex in auth IDs

2026-10-30 14:55:37 +00:00

util

policy/v2: warn once at load about malformed nextdns attrs

2026-10-30 14:55:37 +00:00

apiv1_apikeys_test.go

test: add golden parity tests for the v1 API

2026-06-19 15:21:00 +02:00

apiv1_auth_test.go

hscontrol: bound pending authentication without evicting sessions

2026-10-29 20:51:50 +01:00

apiv1_authmw_test.go

test: add golden parity tests for the v1 API

2026-06-19 15:21:00 +02:00

apiv1_client_test.go

gen/client/v1: add the generated HTTP client

2026-06-19 15:21:00 +02:00

apiv1_harness_test.go

hscontrol: keep golden file names valid in Go module zips

2026-10-29 14:00:02 +01:00

apiv1_health_test.go

test: add golden parity tests for the v1 API

2026-06-19 15:21:00 +02:00

apiv1_nodes_test.go

db, state: keep the ephemeral flag a node was created with

2026-10-30 14:55:37 +00:00

apiv1_policy_test.go

state: install a written policy only after it is stored

2026-10-30 14:55:36 +00:00

apiv1_preauthkeys_test.go

db, api/v1: revoke rather than delete an ephemeral pre-auth key in use

2026-10-30 14:55:37 +00:00

apiv1_socket_test.go

gen/client/v1: add the generated HTTP client

2026-06-19 15:21:00 +02:00

apiv1_users_test.go

test: add golden parity tests for the v1 API

2026-06-19 15:21:00 +02:00

apiv2_acl_test.go

api/v2: stop echoing request values in error responses

2026-10-30 14:55:37 +00:00

apiv2_compat_test.go

db: keep at most 1000 access tokens per OAuth client

2026-10-30 14:55:37 +00:00

apiv2_devices_test.go

api, policy/v2: refuse route prefixes with host bits

2026-10-30 14:55:36 +00:00

apiv2_keys_test.go

db: succeed on a repeated revoke of an auth key

2026-10-30 14:55:37 +00:00

apiv2_oauth_matrix_test.go

api/v2: check the createKey scope before reading the body

2026-10-30 14:55:37 +00:00

apiv2_oauth_test.go

db: keep at most 1000 access tokens per OAuth client

2026-10-30 14:55:37 +00:00

apiv2_settings_test.go

mapper: send CertDomains and https cap when certificates are enabled

2026-10-18 20:53:18 +02:00

apiv2_users_test.go

hscontrol: contract-test the v2 users endpoint

2026-06-24 18:41:06 +02:00

app_test.go

debug: refuse requests addressed to unknown host names

2026-10-30 14:55:37 +00:00

app_tls_test.go

hscontrol: replace autocert with certmagic

2026-10-18 20:53:18 +02:00

app.go

db, state: keep the ephemeral flag a node was created with

2026-10-30 14:55:37 +00:00

auth_compat_test.go

auth, state: answer an expired node's same-key login with NodeKeyExpired

2026-10-30 14:55:36 +00:00

auth_tags_test.go

auth: store a client's earlier expiry and expire a tagged node at logout

2026-10-30 14:55:36 +00:00

auth_test.go

auth: answer a logout that deletes an ephemeral node as authorised

2026-10-30 14:55:37 +00:00

auth.go

auth: answer a logout that deletes an ephemeral node as authorised

2026-10-30 14:55:37 +00:00

debug.go

debug: refuse requests addressed to unknown host names

2026-10-30 14:55:37 +00:00

handlers_test.go

db, state: keep the ephemeral flag a node was created with

2026-10-30 14:55:37 +00:00

handlers.go

types: accept only lowercase hex in auth IDs

2026-10-30 14:55:37 +00:00

metrics.go

metrics, policy/v2: drop unused scaffolding + nil-error returns

2026-05-19 09:55:22 +02:00

noise_test.go

hscontrol: bound pending authentication without evicting sessions

2026-10-29 20:51:50 +01:00

noise.go

hscontrol: bound client-chosen text in request logs

2026-10-30 14:55:37 +00:00

oidc_confirm_test.go

hscontrol: bound pending authentication without evicting sessions

2026-10-29 20:51:50 +01:00

oidc_cookiename_test.go

oidc: avoid slice panic in getCookieName for short values

2026-06-08 10:04:49 +02:00

oidc_template_test.go

oidc: render HTML error pages for browser-facing failures

2026-04-13 17:23:47 +01:00

oidc_test.go

oidc: show requested tags on the registration confirmation page

2026-10-30 14:55:37 +00:00

oidc.go

oidc: show requested tags on the registration confirmation page

2026-10-30 14:55:37 +00:00

platform_config_test.go

hscontrol: read Apple platform via chi.URLParam, not mux.Vars

2026-06-05 15:00:59 +02:00

platform_config.go

hscontrol: use the stdlib uuid package

2026-08-25 21:59:00 +02:00

poll_test.go

db, state: keep the ephemeral flag a node was created with

2026-10-30 14:55:37 +00:00

poll.go

poll: hold the map session's node as a view

2026-10-30 14:55:36 +00:00

realip_test.go

hscontrol: gate proxy header trust on trusted_proxies

2026-05-18 17:17:55 +02:00

realip.go

all: adopt slices helpers

2026-06-17 16:12:19 +02:00

tailsql.go

policy, mapper, capver, hscontrol: remove dead code

2026-06-17 16:12:19 +02:00

templates_consistency_test.go

Update links to Tailscale documentation

2026-04-18 09:33:41 +02:00