Kristoffer Dalby e1de83cbdf state: give another user's key on a tagged machine a new device ...

Only a key that speaks for a tagged node re-authenticates it: a tagged
key, or one of the user it was tagged from. Another user's key or login
adds that user's own device, or only wakes the node under its node key.

Fixes ANT-2026-AWGRB7O1

2026-10-29 14:00:02 +01:00

..

api

api/v2: add the acl/validate endpoint

2026-10-29 11:04:05 +01:00

assets

assets: fix logo alignment and error icon centering

2026-04-13 17:23:47 +01:00

capver

capver: regenerate for Tailscale v1.104

2026-10-15 10:50:32 +02:00

db

db: quote postgres connection parameters (#3477)

2026-10-22 22:36:04 +02:00

derp

derp/server: resolve the live DERP map in /bootstrap-dns

2026-10-07 11:10:38 +02:00

dns

hscontrol: replace autocert with certmagic

2026-10-18 20:53:18 +02:00

mapper

mapper: count folded patches when bounding pending

2026-10-23 18:23:53 +02:00

policy

servertest, policy/v2: add re-authentication golden data

2026-10-29 14:00:02 +01:00

scope

db: reject unknown OAuth client scopes at creation (#3424)

2026-09-25 21:24:37 +02:00

servertest

state: give another user's key on a tagged machine a new device

2026-10-29 14:00:02 +01:00

state

state: give another user's key on a tagged machine a new device

2026-10-29 14:00:02 +01:00

templates

templates: apply the tvOS setup reorder to the served /apple page

2026-08-29 18:18:35 +02:00

testdata/apiv1_golden

hscontrol: keep golden file names valid in Go module zips

2026-10-29 14:00:02 +01:00

types

state: give another user's key on a tagged machine a new device

2026-10-29 14:00:02 +01:00

util

policyutil: match DstPorts as ranges when reducing filters

2026-10-23 18:23:53 +02:00

apiv1_apikeys_test.go

test: add golden parity tests for the v1 API

2026-06-19 15:21:00 +02:00

apiv1_auth_test.go

test: add golden parity tests for the v1 API

2026-06-19 15:21:00 +02:00

apiv1_authmw_test.go

test: add golden parity tests for the v1 API

2026-06-19 15:21:00 +02:00

apiv1_client_test.go

gen/client/v1: add the generated HTTP client

2026-06-19 15:21:00 +02:00

apiv1_harness_test.go

hscontrol: keep golden file names valid in Go module zips

2026-10-29 14:00:02 +01:00

apiv1_health_test.go

test: add golden parity tests for the v1 API

2026-06-19 15:21:00 +02:00

apiv1_nodes_test.go

policy/v2, servertest, hscontrol: add tailnet overlap route captures

2026-10-29 14:00:02 +01:00

apiv1_policy_test.go

test: add golden parity tests for the v1 API

2026-06-19 15:21:00 +02:00

apiv1_preauthkeys_test.go

test: add golden parity tests for the v1 API

2026-06-19 15:21:00 +02:00

apiv1_socket_test.go

gen/client/v1: add the generated HTTP client

2026-06-19 15:21:00 +02:00

apiv1_users_test.go

test: add golden parity tests for the v1 API

2026-06-19 15:21:00 +02:00

apiv2_acl_test.go

api/v2: add the acl/validate endpoint

2026-10-29 11:04:05 +01:00

apiv2_devices_test.go

policy/v2, servertest, hscontrol: add tailnet overlap route captures

2026-10-29 14:00:02 +01:00

apiv2_keys_test.go

api/v2: add OAuth client-credentials auth and scope enforcement

2026-06-26 09:18:06 +02:00

apiv2_oauth_matrix_test.go

hscontrol, integration: test OAuth scope enforcement and the oauth-clients CLI

2026-06-26 09:18:06 +02:00

apiv2_oauth_test.go

policy/v2, servertest, hscontrol: add tailnet overlap route captures

2026-10-29 14:00:02 +01:00

apiv2_settings_test.go

mapper: send CertDomains and https cap when certificates are enabled

2026-10-18 20:53:18 +02:00

apiv2_users_test.go

hscontrol: contract-test the v2 users endpoint

2026-06-24 18:41:06 +02:00

app_test.go

hscontrol: replace autocert with certmagic

2026-10-18 20:53:18 +02:00

app_tls_test.go

hscontrol: replace autocert with certmagic

2026-10-18 20:53:18 +02:00

app.go

hscontrol: wait for map session cleanup during shutdown

2026-10-23 18:23:53 +02:00

auth_tags_test.go

state: do not expire tagged nodes on logout

2026-07-28 11:55:17 +02:00

auth_test.go

state: give another user's key on a tagged machine a new device

2026-10-29 14:00:02 +01:00

auth.go

state: keep node removal apart from policy refresh in DeleteNode

2026-09-30 19:03:13 +02:00

debug.go

all: adopt slices helpers

2026-06-17 16:12:19 +02:00

handlers_test.go

hscontrol: admit DERP clients via NodeKey index

2026-10-07 22:55:03 +02:00

handlers.go

hscontrol: admit DERP clients via NodeKey index

2026-10-07 22:55:03 +02:00

metrics.go

metrics, policy/v2: drop unused scaffolding + nil-error returns

2026-05-19 09:55:22 +02:00

noise_test.go

noise: restrict metrics to the metrics listener

2026-10-29 13:05:56 +01:00

noise.go

noise: restrict metrics to the metrics listener

2026-10-29 13:05:56 +01:00

oidc_confirm_test.go

all: annotate gosec false positives with rationale

2026-05-19 09:55:22 +02:00

oidc_cookiename_test.go

oidc: avoid slice panic in getCookieName for short values

2026-06-08 10:04:49 +02:00

oidc_template_test.go

oidc: render HTML error pages for browser-facing failures

2026-04-13 17:23:47 +01:00

oidc_test.go

state: stop the auth cache TTL sweeper on Close

2026-10-23 18:23:53 +02:00

oidc.go

state: refresh policy nodes inside the peer map build

2026-09-30 17:21:02 +02:00

platform_config_test.go

hscontrol: read Apple platform via chi.URLParam, not mux.Vars

2026-06-05 15:00:59 +02:00

platform_config.go

hscontrol: use the stdlib uuid package

2026-08-25 21:59:00 +02:00

poll_test.go

mapper: retry slow sessions from current state

2026-10-23 18:23:53 +02:00

poll.go

hscontrol: wait for map session cleanup during shutdown

2026-10-23 18:23:53 +02:00

realip_test.go

hscontrol: gate proxy header trust on trusted_proxies

2026-05-18 17:17:55 +02:00

realip.go

all: adopt slices helpers

2026-06-17 16:12:19 +02:00

tailsql.go

policy, mapper, capver, hscontrol: remove dead code

2026-06-17 16:12:19 +02:00

templates_consistency_test.go

Update links to Tailscale documentation

2026-04-18 09:33:41 +02:00