Kristoffer Dalby 0451dd4718 state: allow untagging nodes via reauth with empty RequestTags ...

When a node re-authenticates via OIDC/web auth with empty RequestTags
(from `tailscale up --advertise-tags= --force-reauth`), remove all tags
and return ownership to the authenticating user.

This allows nodes to transition from any tagged state (including nodes
originally registered with a tagged pre-auth key) back to user-owned.

Fixes #2979

2026-01-17 10:13:24 +01:00

..

assets

editorconfig: add basic editor config

2025-12-16 10:12:36 +01:00

capver

capver: generate

2025-12-18 10:02:23 +01:00

db

sqliteconfig: add config opt for tx locking

2025-12-22 14:01:40 +01:00

derp

golangci-lint: use forbidigo to block time.Sleep (#2946)

2025-12-10 16:45:59 +00:00

dns

integration: replace time.Sleep with assert.EventuallyWithT (#2680)

2025-07-10 23:38:55 +02:00

mapper

cli: ensure tagged-devices is included in profile list (#2991)

2026-01-09 16:31:23 +01:00

policy

policy: add test to confirm group cant approve tag

2025-12-17 09:32:05 +01:00

routes

debug: add json and improve

2025-09-09 09:40:00 +02:00

state

state: allow untagging nodes via reauth with empty RequestTags

2026-01-17 10:13:24 +01:00

templates

Link to headscale.net for docs

2026-01-16 14:54:04 +01:00

types

types: use Username() in User.Proto() when Name is empty

2026-01-14 13:16:51 +01:00

util

util/dns: fix variable redeclaration in ValidateDNSName

2026-01-17 10:13:24 +01:00

app.go

app: only wire up debug server if set

2025-12-17 12:32:04 +01:00

auth_tags_test.go

state: disable key expiry for tagged nodes

2026-01-16 17:05:59 +01:00

auth_test.go

state: allow untagging nodes via reauth with empty RequestTags

2026-01-17 10:13:24 +01:00

auth.go

cli: ensure tagged-devices is included in profile list (#2991)

2026-01-09 16:31:23 +01:00

debug.go

lint and leftover

2025-09-09 09:40:00 +02:00

grpcv1_test.go

tags: process tags on registration, simplify policy (#2931)

2025-12-08 18:51:07 +01:00

grpcv1.go

gen: regenerate protobuf code

2026-01-14 09:32:46 +01:00

handlers.go

all: remove deadcode (#2952)

2025-12-10 15:55:15 +01:00

metrics.go

all: remove deadcode (#2952)

2025-12-10 15:55:15 +01:00

noise.go

all: remove deadcode (#2952)

2025-12-10 15:55:15 +01:00

oidc_template_test.go

make tags first class node owner (#2885)

2025-12-02 12:01:25 +01:00

oidc_test.go

oidc: make email verification configurable

2025-12-18 11:42:32 +00:00

oidc.go

oidc: make email verification configurable

2025-12-18 11:42:32 +00:00

platform_config.go

Return better web errors to the user (#2398)

2025-02-01 15:25:18 +01:00

poll.go

all: remove deadcode (#2952)

2025-12-10 15:55:15 +01:00

suite_test.go

Redo OIDC configuration (#2020)

2024-10-02 14:50:17 +02:00

tailsql.go

integration: replace time.Sleep with assert.EventuallyWithT (#2680)

2025-07-10 23:38:55 +02:00

templates_consistency_test.go

Link to headscale.net for docs

2026-01-16 14:54:04 +01:00