Jacky 78926fbde4 fix: scope DestroyUser to only delete target user's pre-auth keys ...

DestroyUser called ListPreAuthKeys(tx) which returns ALL keys in the
database, then deleted every one of them. This caused deleting any
single user to wipe all pre-auth keys system-wide.

Fix: query only keys belonging to the user being deleted using
tx.Where("user_id = ?", uid).Find(&keys).

Fixes: https://github.com/juanfont/headscale/issues/3154

2026-04-05 14:24:01 +09:00

..

sqliteconfig

sqliteconfig: add config opt for tx locking

2025-12-22 14:01:40 +01:00

testdata/sqlite

db: use PolicyManager for RequestTags migration

2026-01-21 15:10:29 +01:00

api_key_test.go

grpc: support expire/delete API keys by ID

2026-01-20 17:13:38 +01:00

api_key.go

types: make pre auth key use bcrypt (#2853)

2025-11-12 16:36:36 +01:00

db_test.go

db: use PolicyManager for RequestTags migration

2026-01-21 15:10:29 +01:00

db.go

db: use PolicyManager for RequestTags migration

2026-01-21 15:10:29 +01:00

ephemeral_garbage_collector_test.go

golangci-lint: use forbidigo to block time.Sleep (#2946)

2025-12-10 16:45:59 +00:00

ip_test.go

make tags first class node owner (#2885)

2025-12-02 12:01:25 +01:00

ip.go

fix: free ips from usedIps ipset on DeleteNode

2025-11-11 17:27:00 -06:00

node_test.go

db: migrate tests from check.v1 to testify

2026-01-20 15:41:33 +01:00

node.go

make tags first class node owner (#2885)

2025-12-02 12:01:25 +01:00

policy.go

db: use PolicyManager for RequestTags migration

2026-01-21 15:10:29 +01:00

preauth_keys_test.go

cli,hscontrol: use ID-based preauthkey operations

2026-01-20 12:53:20 +01:00

preauth_keys.go

hscontrol: allow CreatePreAuthKey without user when tags provided

2026-01-20 12:53:20 +01:00

schema.sql

make tags first class node owner (#2885)

2025-12-02 12:01:25 +01:00

suite_test.go

db: use PolicyManager for RequestTags migration

2026-01-21 15:10:29 +01:00

text_serialiser.go

modernize: run gopls modernize to bring up to 1.25 (#2920)

2025-12-01 19:40:25 +01:00

user_update_test.go

hscontrol: use Updates() instead of Save() for partial updates

2025-11-11 12:47:48 -06:00

users_test.go

make tags first class node owner (#2885)

2025-12-02 12:01:25 +01:00

users.go

fix: scope DestroyUser to only delete target user's pre-auth keys

2026-04-05 14:24:01 +09:00