Kristoffer Dalby 0451dd4718 state: allow untagging nodes via reauth with empty RequestTags ...

When a node re-authenticates via OIDC/web auth with empty RequestTags
(from `tailscale up --advertise-tags= --force-reauth`), remove all tags
and return ownership to the authenticating user.

This allows nodes to transition from any tagged state (including nodes
originally registered with a tagged pre-auth key) back to user-owned.

Fixes #2979

2026-01-17 10:13:24 +01:00

..

debug_test.go

hscontrol/state: make NodeStore batch configuration tunable (#2886)

2025-11-28 16:38:29 +01:00

debug.go

cli: ensure tagged-devices is included in profile list (#2991)

2026-01-09 16:31:23 +01:00

endpoint_test.go

hscontrol/state: make NodeStore batch configuration tunable (#2886)

2025-11-28 16:38:29 +01:00

ephemeral_test.go

hscontrol/state: make NodeStore batch configuration tunable (#2886)

2025-11-28 16:38:29 +01:00

maprequest_test.go

make tags first class node owner (#2885)

2025-12-02 12:01:25 +01:00

maprequest.go

stability and race conditions in auth and node store (#2781)

2025-10-16 12:17:43 +02:00

node_store_test.go

policy: more accurate node change

2025-12-16 10:12:36 +01:00

node_store.go

cli: ensure tagged-devices is included in profile list (#2991)

2026-01-09 16:31:23 +01:00

state.go

state: allow untagging nodes via reauth with empty RequestTags

2026-01-17 10:13:24 +01:00

tags.go

tags: process tags on registration, simplify policy (#2931)

2025-12-08 18:51:07 +01:00

test_helpers.go

hscontrol/state: make NodeStore batch configuration tunable (#2886)

2025-11-28 16:38:29 +01:00