mirror of
https://github.com/juanfont/headscale.git
synced 2026-11-05 04:59:26 +09:00
State.RenameUser went through UpdateUser and skipped the checks db.RenameUser applies, so the API could rename an OIDC user, whose name the identity provider owns, or rename any user to an invalid name. Apply both checks in the update function and map the username validation errors to 400.