Kristoffer Dalby 99767cf805 hscontrol: validate machine key and bind src/dst in SSH check handler ...

SSHActionHandler now verifies that the Noise session's machine key
matches the dst node before proceeding. The (src, dst) pair is
captured at hold-and-delegate time via a new SSHCheckBinding on
AuthRequest so sshActionFollowUp can verify the follow-up URL
matches. The OIDC non-registration callback requires the
authenticated user to own the src node before approving.

2026-04-10 14:09:57 +01:00

..

auth_cache_test.go

state: replace zcache with bounded LRU for auth cache

2026-04-10 14:09:57 +01:00

debug_test.go

hscontrol/state: make NodeStore batch configuration tunable (#2886)

2025-11-28 16:38:29 +01:00

debug.go

state: replace zcache with bounded LRU for auth cache

2026-04-10 14:09:57 +01:00

endpoint_test.go

hscontrol/state: make NodeStore batch configuration tunable (#2886)

2025-11-28 16:38:29 +01:00

ephemeral_test.go

all: upgrade to Go 1.26rc2 and modernize codebase

2026-02-08 12:35:23 +01:00

maprequest_test.go

all: fix golangci-lint issues (#3064)

2026-02-06 21:45:32 +01:00

maprequest.go

all: fix golangci-lint issues (#3064)

2026-02-06 21:45:32 +01:00

node_store_test.go

all: upgrade to Go 1.26rc2 and modernize codebase

2026-02-08 12:35:23 +01:00

node_store.go

hscontrol: enforce that tagged nodes never have user_id

2026-02-20 21:51:00 +01:00

ssh_check_test.go

state, policy, noise: implement SSH check period auto-approval

2026-02-25 21:28:05 +01:00

state.go

hscontrol: validate machine key and bind src/dst in SSH check handler

2026-04-10 14:09:57 +01:00

tags.go

hscontrol: enforce that tagged nodes never have user_id

2026-02-20 21:51:00 +01:00

test_helpers.go

hscontrol/state: make NodeStore batch configuration tunable (#2886)

2025-11-28 16:38:29 +01:00