Kristoffer Dalby a9d5ec6202 hscontrol/api: return a minimal 401 for failed security requirements ...

ogen's SecurityError message echoes the operation name and internal
security text. Map it to a clean 401 so the unauthorized body stays small
and leaks nothing.

2026-06-19 05:58:10 +00:00

..

api/v1

hscontrol/api: return a minimal 401 for failed security requirements

2026-06-19 05:58:10 +00:00

assets

assets: fix logo alignment and error icon centering

2026-04-13 17:23:47 +01:00

capver

all: adopt slices helpers

2026-06-17 16:12:19 +02:00

db

types: drop the proto builders

2026-06-19 05:57:04 +00:00

derp

all: adopt strings, errors, and os helpers

2026-06-17 16:12:19 +02:00

dns

dns, change, noise, auth, capver: misc consolidation

2026-06-17 16:12:19 +02:00

mapper

all: adopt maps and cmp helpers

2026-06-17 16:12:19 +02:00

policy

all: adopt strings, errors, and os helpers

2026-06-17 16:12:19 +02:00

servertest

hscontrol/api/v1: implement auth and policy endpoints

2026-06-19 05:57:04 +00:00

state

hscontrol/api/v1: build responses from state views, not proto

2026-06-19 05:57:04 +00:00

templates

templates: consolidate shared page and component helpers

2026-06-17 16:12:19 +02:00

types

all: remove dead gRPC config, tests, and helpers

2026-06-19 05:58:10 +00:00

util

all: remove dead gRPC config, tests, and helpers

2026-06-19 05:58:10 +00:00

app_test.go

app: add security headers middleware

2026-04-17 16:31:49 +01:00

app.go

all: remove dead gRPC config, tests, and helpers

2026-06-19 05:58:10 +00:00

auth_tags_test.go

all: remove dead gRPC config, tests, and helpers

2026-06-19 05:58:10 +00:00

auth_test.go

state: return all nodes for a machine key, reject ambiguous ownership

2026-06-15 20:29:15 +02:00

auth.go

dns, change, noise, auth, capver: misc consolidation

2026-06-17 16:12:19 +02:00

debug.go

all: adopt slices helpers

2026-06-17 16:12:19 +02:00

handlers_test.go

handlers: set verify Content-Type before writing the body

2026-06-17 16:12:19 +02:00

handlers.go

handlers: set verify Content-Type before writing the body

2026-06-17 16:12:19 +02:00

metrics.go

metrics, policy/v2: drop unused scaffolding + nil-error returns

2026-05-19 09:55:22 +02:00

noise_test.go

noise: re-delegate SSH check when the auth session is missing (#3306)

2026-06-10 11:48:02 +02:00

noise.go

dns, change, noise, auth, capver: misc consolidation

2026-06-17 16:12:19 +02:00

oidc_confirm_test.go

all: annotate gosec false positives with rationale

2026-05-19 09:55:22 +02:00

oidc_cookiename_test.go

oidc: avoid slice panic in getCookieName for short values

2026-06-08 10:04:49 +02:00

oidc_template_test.go

oidc: render HTML error pages for browser-facing failures

2026-04-13 17:23:47 +01:00

oidc_test.go

hscontrol: satisfy golangci-lint on changed lines

2026-06-09 15:21:18 +02:00

oidc.go

util, db: generate key material as hex via tailscale rands

2026-06-17 16:12:19 +02:00

platform_config_test.go

hscontrol: read Apple platform via chi.URLParam, not mux.Vars

2026-06-05 15:00:59 +02:00

platform_config.go

hscontrol: consolidate debug-endpoint and template helpers

2026-06-17 16:12:19 +02:00

poll_test.go

all: apply godoc [Name] link conventions across comments

2026-05-19 09:55:22 +02:00

poll.go

state, poll: refcount poll sessions, mark offline only on last release

2026-06-11 16:28:25 +02:00

realip_test.go

hscontrol: gate proxy header trust on trusted_proxies

2026-05-18 17:17:55 +02:00

realip.go

all: adopt slices helpers

2026-06-17 16:12:19 +02:00

tailsql.go

policy, mapper, capver, hscontrol: remove dead code

2026-06-17 16:12:19 +02:00

templates_consistency_test.go

Update links to Tailscale documentation

2026-04-18 09:33:41 +02:00