Kristoffer Dalby f67c5b3a82 oidc: approve SSH checks on the confirmation page, not in the callback ...

Require an explicit click before recording the SSH verdict.
Recheck source ownership on the callback, confirmation page, and POST.

2026-10-28 18:28:23 +00:00

..

api

db, state: keep the ephemeral flag a node was created with

2026-10-28 18:28:22 +00:00

assets

assets: fix logo alignment and error icon centering

2026-04-13 17:23:47 +01:00

capver

capver: regenerate for Tailscale v1.104

2026-10-15 10:50:32 +02:00

db

db: succeed on a repeated revoke of an auth key

2026-10-28 18:28:22 +00:00

derp

derp/server: resolve the live DERP map in /bootstrap-dns

2026-10-07 11:10:38 +02:00

dns

hscontrol: replace autocert with certmagic

2026-10-18 20:53:18 +02:00

mapper

change: do not echo a node's own report back to it

2026-10-28 18:28:22 +00:00

policy

policy/v2: match no user for a bare "@" token

2026-10-28 18:28:23 +00:00

scope

db: reject unknown OAuth client scopes at creation (#3424)

2026-09-25 21:24:37 +02:00

servertest

state: refresh the NodeStore copies of a user in UpdateUser

2026-10-28 18:28:23 +00:00

state

policy/v2: match no one for an ambiguous user outside policy writes

2026-10-28 18:28:23 +00:00

templates

oidc: approve SSH checks on the confirmation page, not in the callback

2026-10-28 18:28:23 +00:00

testdata/apiv1_golden

db, state: keep the ephemeral flag a node was created with

2026-10-28 18:28:22 +00:00

types

oidc: approve SSH checks on the confirmation page, not in the callback

2026-10-28 18:28:23 +00:00

util

policy/v2: warn once at load about malformed nextdns attrs

2026-10-28 18:28:22 +00:00

apiv1_apikeys_test.go

test: add golden parity tests for the v1 API

2026-06-19 15:21:00 +02:00

apiv1_auth_test.go

test: add golden parity tests for the v1 API

2026-06-19 15:21:00 +02:00

apiv1_authmw_test.go

test: add golden parity tests for the v1 API

2026-06-19 15:21:00 +02:00

apiv1_client_test.go

gen/client/v1: add the generated HTTP client

2026-06-19 15:21:00 +02:00

apiv1_harness_test.go

test: add golden parity tests for the v1 API

2026-06-19 15:21:00 +02:00

apiv1_health_test.go

test: add golden parity tests for the v1 API

2026-06-19 15:21:00 +02:00

apiv1_nodes_test.go

db, state: keep the ephemeral flag a node was created with

2026-10-28 18:28:22 +00:00

apiv1_policy_test.go

state: install a written policy only after it is stored

2026-10-28 18:28:21 +00:00

apiv1_preauthkeys_test.go

db, api/v1: revoke rather than delete an ephemeral pre-auth key in use

2026-10-28 18:28:22 +00:00

apiv1_socket_test.go

gen/client/v1: add the generated HTTP client

2026-06-19 15:21:00 +02:00

apiv1_users_test.go

test: add golden parity tests for the v1 API

2026-06-19 15:21:00 +02:00

apiv2_acl_test.go

state: install a written policy only after it is stored

2026-10-28 18:28:21 +00:00

apiv2_compat_test.go

policy/v2: label sshTests failures with the dst alias

2026-10-28 18:28:21 +00:00

apiv2_devices_test.go

api, policy/v2: refuse route prefixes with host bits

2026-10-28 18:28:22 +00:00

apiv2_keys_test.go

db: succeed on a repeated revoke of an auth key

2026-10-28 18:28:22 +00:00

apiv2_oauth_matrix_test.go

hscontrol, integration: test OAuth scope enforcement and the oauth-clients CLI

2026-06-26 09:18:06 +02:00

apiv2_oauth_test.go

policy/v2, servertest, hscontrol: add tailnet overlap route captures

2026-10-28 14:17:50 +00:00

apiv2_settings_test.go

mapper: send CertDomains and https cap when certificates are enabled

2026-10-18 20:53:18 +02:00

apiv2_users_test.go

hscontrol: contract-test the v2 users endpoint

2026-06-24 18:41:06 +02:00

app_test.go

hscontrol: replace autocert with certmagic

2026-10-18 20:53:18 +02:00

app_tls_test.go

hscontrol: replace autocert with certmagic

2026-10-18 20:53:18 +02:00

app.go

db, state: keep the ephemeral flag a node was created with

2026-10-28 18:28:22 +00:00

auth_compat_test.go

auth, state: answer an expired node's same-key login with NodeKeyExpired

2026-10-28 18:28:22 +00:00

auth_tags_test.go

auth: store a client's earlier expiry and expire a tagged node at logout

2026-10-28 18:28:22 +00:00

auth_test.go

auth: answer a logout that deletes an ephemeral node as authorised

2026-10-28 18:28:22 +00:00

auth.go

auth: answer a logout that deletes an ephemeral node as authorised

2026-10-28 18:28:22 +00:00

debug.go

all: adopt slices helpers

2026-06-17 16:12:19 +02:00

handlers_test.go

db, state: keep the ephemeral flag a node was created with

2026-10-28 18:28:22 +00:00

handlers.go

hscontrol: bound client-chosen text in request logs

2026-10-28 18:28:22 +00:00

metrics.go

metrics, policy/v2: drop unused scaffolding + nil-error returns

2026-05-19 09:55:22 +02:00

noise_test.go

noise: stop serving metrics inside the tunnel

2026-10-28 18:28:22 +00:00

noise.go

noise: stop serving metrics inside the tunnel

2026-10-28 18:28:22 +00:00

oidc_confirm_test.go

all: annotate gosec false positives with rationale

2026-05-19 09:55:22 +02:00

oidc_cookiename_test.go

oidc: avoid slice panic in getCookieName for short values

2026-06-08 10:04:49 +02:00

oidc_template_test.go

oidc: render HTML error pages for browser-facing failures

2026-04-13 17:23:47 +01:00

oidc_test.go

oidc: approve SSH checks on the confirmation page, not in the callback

2026-10-28 18:28:23 +00:00

oidc.go

oidc: approve SSH checks on the confirmation page, not in the callback

2026-10-28 18:28:23 +00:00

platform_config_test.go

hscontrol: read Apple platform via chi.URLParam, not mux.Vars

2026-06-05 15:00:59 +02:00

platform_config.go

hscontrol: use the stdlib uuid package

2026-08-25 21:59:00 +02:00

poll_test.go

db, state: keep the ephemeral flag a node was created with

2026-10-28 18:28:22 +00:00

poll.go

poll: hold the map session's node as a view

2026-10-28 18:28:22 +00:00

realip_test.go

hscontrol: gate proxy header trust on trusted_proxies

2026-05-18 17:17:55 +02:00

realip.go

all: adopt slices helpers

2026-06-17 16:12:19 +02:00

tailsql.go

policy, mapper, capver, hscontrol: remove dead code

2026-06-17 16:12:19 +02:00

templates_consistency_test.go

Update links to Tailscale documentation

2026-04-18 09:33:41 +02:00