Kristoffer Dalby 99767cf805 hscontrol: validate machine key and bind src/dst in SSH check handler ...

SSHActionHandler now verifies that the Noise session's machine key
matches the dst node before proceeding. The (src, dst) pair is
captured at hold-and-delegate time via a new SSHCheckBinding on
AuthRequest so sshActionFollowUp can verify the follow-up URL
matches. The OIDC non-registration callback requires the
authenticated user to own the src node before approving.

2026-04-10 14:09:57 +01:00

..

change

types/change: panic on Merge with conflicting TargetNode values

2026-04-10 13:18:56 +01:00

testdata

Restore support for "Override local DNS" (#2438)

2025-04-17 17:16:59 +02:00

api_key.go

types: add MarshalZerologObject to domain types

2026-02-06 07:40:29 +01:00

common_test.go

hscontrol: validate machine key and bind src/dst in SSH check handler

2026-04-10 14:09:57 +01:00

common.go

hscontrol: validate machine key and bind src/dst in SSH check handler

2026-04-10 14:09:57 +01:00

config_test.go

all: fix golangci-lint issues (#3064)

2026-02-06 21:45:32 +01:00

config.go

state: replace zcache with bounded LRU for auth cache

2026-04-10 14:09:57 +01:00

const.go

improve testing of route failover logic

2024-04-15 12:31:53 +02:00

main_test.go

all: fix test flakiness and improve test infrastructure

2026-03-14 02:52:28 -07:00

node_benchmark_test.go

types: avoid NodeView clone in CanAccess

2026-02-26 19:15:07 -08:00

node_tags_test.go

all: upgrade to Go 1.26rc2 and modernize codebase

2026-02-08 12:35:23 +01:00

node_test.go

types: include ExitRoutes in HasNetworkChanges

2026-04-01 14:10:42 +01:00

node.go

types: fix nil panics in Owner() and TailscaleUserID() for orphaned nodes

2026-04-10 13:18:56 +01:00

policy.go

feat: implements apis for managing headscale policy (#1792)

2024-07-18 07:38:25 +02:00

preauth_key_test.go

all: upgrade to Go 1.26rc2 and modernize codebase

2026-02-08 12:35:23 +01:00

preauth_key.go

all: fix golangci-lint issues (#3064)

2026-02-06 21:45:32 +01:00

registration.go

state: replace zcache with bounded LRU for auth cache

2026-04-10 14:09:57 +01:00

routes.go

Redo route code (#2422)

2025-02-26 16:22:55 +01:00

types_clone.go

all: regenerate generated files for new tool versions

2026-04-09 18:42:25 +01:00

types_view.go

all: regenerate generated files for new tool versions

2026-04-09 18:42:25 +01:00

users_test.go

all: fix golangci-lint issues (#3064)

2026-02-06 21:45:32 +01:00

users.go

types: fix OIDC identifier path traversal dropping subject

2026-04-10 13:18:56 +01:00

version.go

all: fix golangci-lint issues (#3064)

2026-02-06 21:45:32 +01:00