3340 commits

This branch

This branch

All branches

Author	SHA1	Message	Date
Kristoffer Dalby	688c031f63	longer timeout for reconnect without https ... Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>	2025-01-17 18:10:53 +01:00
Kristoffer Dalby	1031c2a8d5	uncomment defer ... Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>	2025-01-17 17:32:39 +01:00
Kristoffer Dalby	218ba6d413	consecutive login tests need tls ... Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>	2025-01-17 17:31:52 +01:00
Kristoffer Dalby	282d1cad89	output hs addr on failed up in web auth ... Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>	2025-01-17 17:31:51 +01:00
Kristoffer Dalby	9097d57eea	more login debug output in tests ... Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>	2025-01-17 17:31:51 +01:00
Kristoffer Dalby	609203a9b9	always use dns name for headscale in integration tests ... Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>	2025-01-17 17:31:51 +01:00
Kristoffer Dalby	a949ca4617	add registration_id support to web auth ... Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>	2025-01-17 17:31:51 +01:00
Kristoffer Dalby	0890dd69c5	clean up rejection of old clients ... Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>	2025-01-17 17:31:50 +01:00
Kristoffer Dalby	b93c0744a3	fixup CLI tests ... Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>	2025-01-17 17:31:50 +01:00
Kristoffer Dalby	2d4500f60f	add to cache as part of cli reauth ... Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>	2025-01-17 17:31:50 +01:00
Kristoffer Dalby	b177b24c6d	move refresh logic to db layer ... Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>	2025-01-17 16:57:13 +01:00
Kristoffer Dalby	d13c15cb67	add GetNodeByNodeKey lookup ... Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>	2025-01-17 16:57:12 +01:00
Kristoffer Dalby	b4e7394563	use registration ID in reg flow, support followup ... Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>	2025-01-17 16:57:12 +01:00
Kristoffer Dalby	fbd0d5e7ce	Add registrationID type ... Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>	2025-01-17 16:57:12 +01:00
Kristoffer Dalby	6c790e48dd	DRY up do login URL ... Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>	2025-01-17 16:57:12 +01:00
Kristoffer Dalby	01fccbc3e8	util: correctly truncate randomurl string ... Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>	2025-01-17 12:01:46 +01:00
Kristoffer Dalby	78a70b455d	scenario func to create a single node ... Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>	2025-01-17 12:01:46 +01:00
Kristoffer Dalby	d06228bf8c	general version of waitForBackendState ... Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>	2025-01-17 12:01:46 +01:00
Kristoffer Dalby	cbd8066757	more debug logging for logout ... Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>	2025-01-17 12:01:46 +01:00
Kristoffer Dalby	95c7450b00	move auth_noise into noise ... Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>	2025-01-17 12:01:45 +01:00
Kristoffer Dalby	e88406e837	set changelog date (#2347)	2025-01-17 12:01:06 +01:00
Kristoffer Dalby	e4a3dcc3b8	use headscale server url as domain instead of base_domain (#2338)	2025-01-16 18:05:20 +01:00
Kristoffer Dalby	caad5c613d	fix nil pointer deref (#2339)	2025-01-16 18:05:05 +01:00
Kristoffer Dalby	38aef77e54	allow @ and Log if OIDC username is not consider valid (#2340)	2025-01-16 18:04:54 +01:00
Dmitry Gordin	1ab7b315a2	Update apple.md for latest version of iOS (#2321) ... The official iOS app now has a simpler login process for custom instances, directly within the app.	2025-01-13 12:09:53 +00:00
github-actions[bot]	610597bfb7	flake.lock: Update (#2342)	2025-01-12 18:54:59 +00:00
Stefan Majer	ede4f97a16	Fix typos	2025-01-09 10:38:25 +01:00
Kristoffer Dalby	fa641e38b8	Set CSRF cookies for OIDC (#2328) ... * set state and nounce in oidc to prevent csrf Fixes #2276 * try to fix new postgres issue Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com> --------- Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>	2025-01-08 16:29:37 +01:00
github-actions[bot]	41bad2b9fd	flake.lock: Update (#2324)	2025-01-05 07:35:18 +00:00
github-actions[bot]	f9bbfa5eab	flake.lock: Update (#2320)	2024-12-29 11:41:52 +00:00
Rorical	b81420bef1	feat: Add PKCE Verifier for OIDC (#2314) ... * feat: add PKCE verifier for OIDC * Update CHANGELOG.md	2024-12-22 16:46:36 +00:00
github-actions[bot]	9313e5b058	flake.lock: Update (#2313)	2024-12-22 07:07:26 +00:00
Kristoffer Dalby	770f3dcb93	fix tags not resolving to username if email is present (#2309) ... * ensure valid tags is populated on user gets too Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com> * ensure forced tags are added Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com> * remove unused envvar in test Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com> * debug log auth/unauth tags in policy man Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com> * defer shutdown in tags test Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com> * add tag test with groups Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com> * add email, display name, picture to create user Updates #2166 Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com> * add ability to set display and email to cli Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com> * add email to test users in integration Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com> * fix issue where tags were only assigned to email, not username Fixes #2300 Fixes #2307 Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com> * expand principles to correct login name and if fix an issue where nodeip principles might not expand to all relevant IPs instead of taking the first in a prefix. Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com> * fix ssh unit test Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com> * update cli and oauth tests for users with email Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com> * index by test email Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com> * fix last test Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com> --------- Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>	2024-12-19 13:10:10 +01:00
Kristoffer Dalby	af4508b9dc	bump deps (#2308) ... * Bump go crypto Closes #2281 Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com> * upgrade tailscale Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com> * upgrade rest Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com> * nix: flake update --------- Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>	2024-12-17 15:35:42 +01:00
Florian Preinstorfer	bbc93a90a2	Set title for code listings	2024-12-17 14:08:34 +01:00
Florian Preinstorfer	0acb2b5647	Misc doc updates	2024-12-17 14:08:34 +01:00
Florian Preinstorfer	3269cfdca0	Mention reload and SIGHUP when editing the ACL policy file ... Fixes: #2284	2024-12-17 14:08:34 +01:00
Florian Preinstorfer	319ce67c87	Update DNS documentation for dns.extra_records_path ... * Describe both ways to add extra DNS records * Use "extra" instead of "custom" to align with the configuration file * Include dns.extra_records_path in the configuration file	2024-12-17 14:08:34 +01:00
Florian Preinstorfer	47b405d6c6	Changelog: support client verify for DERP ... and fix some links Ref: #2304	2024-12-17 14:08:34 +01:00
Florian Preinstorfer	65304a0ce7	Remove sealos documentation ... The referenced version is outdated (0.23.0-beta1) and seems unmaintained.	2024-12-17 14:08:34 +01:00
Dongjun Na	e270169c13	Add -race Flag to GitHub Action and Fix Data Race in CreateTailscaleNodesInUser (#2038) ... * Add -race flag to Makefile and integration tests; fix data race in CreateTailscaleNodesInUser * Fix data race in ExecuteCommand by using local buffers and mutex Signed-off-by: Dongjun Na <kmu5544616@gmail.com> * lint Signed-off-by: Dongjun Na <kmu5544616@gmail.com> --------- Signed-off-by: Dongjun Na <kmu5544616@gmail.com>	2024-12-17 14:06:57 +01:00
Shaw Drastin	7d937c6bd0	Correct macOS GUI connect guide because there's no ALT key on a mac (#2306) ... * Correct macOS GUI connect guide because there's no ALT key on a mac * also correct macOS GUI connect in hscontrol text	2024-12-17 12:11:27 +00:00
Kristoffer Dalby	ccc895b4c6	fixes to extra-record file watcher (#2298) ... * Fix excess error message during writes Fixes #2290 Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com> * retry filewatcher on removed files This should handled if files are deleted and added again, and for rename scenarios. Fixes #2289 Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com> * test more write and remove in filewatcher Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com> --------- Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>	2024-12-16 11:26:56 +01:00
Kristoffer Dalby	5345f19693	fix issue where some oidc claim bools are sent as string (#2297) ... Jumpcloud send invalid json, so we need to handle it. Fixes #2293 Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>	2024-12-16 11:26:32 +01:00
Kristoffer Dalby	ec8729b772	fix sighup issue with empty acl (#2296) ... Fixes #2291 Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>	2024-12-16 07:48:19 +01:00
github-actions[bot]	e00b9d9a91	flake.lock: Update (#2294)	2024-12-15 06:46:14 +00:00
Kristoffer Dalby	58d089ce0a	fix deletion of exit routes without nodes (#2286) ... Fixes #2259 Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>	2024-12-13 20:15:24 +01:00
Kristoffer Dalby	76d26a7eec	update oidc part of changelog for 0.24.0 (#2285)	2024-12-13 12:35:24 +00:00
Kristoffer Dalby	380fcdba17	Add worker reading extra_records_path from file (#2271) ... * consolidate scheduled tasks into one goroutine Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com> * rename Tailcfg dns struct Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com> * add dns.extra_records_path option Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com> * prettier lint Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com> * go-fmt Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com> --------- Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>	2024-12-13 07:52:40 +00:00
Florian Preinstorfer	89a648c7dd	Remove use_username_in_magic_dns option ... Upgrade the use of dns.use_username_in_magic_dns or dns_config.use_username_in_magic_dns to a fatal error and remove the option from the example configuration and integration tests. Fixes: #2219	2024-12-11 18:39:35 +01:00