You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
Remy Guercio
89fe2e1f12
cmd/tsidp: add allow-insecure-no-client-registration and JSON file migration ( #16881 )
...
Add a ternary flag that unless set explicitly to false keeps the
insecure behavior of TSIDP.
If the flag is false, add functionality on startup to migrate
oidc-funnel-clients.json to oauth-clients.json if it doesn’t exist.
If the flag is false, modify endpoints to behave similarly regardless
of funnel, tailnet, or localhost. They will all verify client ID & secret
when appropriate per RFC 6749. The authorize endpoint will no longer change
based on funnel status or nodeID.
Add extra tests verifying TSIDP endpoints behave as expected
with the new flag.
Safely create the redirect URL from what's passed into the
authorize endpoint.
Fixes #16880
Signed-off-by: Remy Guercio <remy@tailscale.com>
8 months ago
..
addlicense
all: fix golangci-lint errors
1 year ago
build-webclient
client/web: precompress assets
2 years ago
checkmetrics
cmd/checkmetrics: add command for checking metrics against kb
1 year ago
cloner
cmd/viewer, types/views: implement support for json/v2 ( #16852 )
9 months ago
connector-gen
…
containerboot
syncs: delete WaitGroup and use sync.WaitGroup.Go in Go 1.25
8 months ago
derper
go.toolchain.branch: bump to go1.25 ( #16954 )
8 months ago
derpprobe
cmd/derpprobe,prober: add run all probes handler ( #16875 )
9 months ago
dist
{cmd/dist,release/dist}: add support for intermediary QNAP signing certificates
9 months ago
get-authkey
cmd,tsnet,internal/client: create internal shim to deprecated control plane API
1 year ago
gitops-pusher
scripts/check_license_headers.sh: delete, rewrite as a Go test
11 months ago
hello
cmd/hello: display native ipv4 ( #15191 )
1 year ago
k8s-nameserver
cmd/k8s-nameserver: fix AAAA record query response ( #12412 )
2 years ago
k8s-operator
wgengine/magicsock: shorten process internal DERP queue
8 months ago
k8s-proxy
cmd/k8s-proxy,k8s-operator: fix serve config for userspace mode ( #16919 )
9 months ago
mkmanifest
…
mkpkg
…
mkversion
version/mkversion: open-source version generation logic
3 years ago
nardump
cmd/nardump: support symlinks, add basic test
1 year ago
natc
cmd/natc,tsconsensus: add cluster config admin
9 months ago
netlogfmt
all: use Go 1.22 range-over-int
2 years ago
nginx-auth
tailcfg,all: add and use Node.IsTagged()
3 years ago
pgproxy
all: use new LocalAPI client package location
1 year ago
printdep
…
proxy-test-server
net/tlsdial: fix TLS cert validation of HTTPS proxies
11 months ago
proxy-to-grafana
scripts/check_license_headers.sh: delete, rewrite as a Go test
11 months ago
sniproxy
net/{netx,memnet},all: add netx.DialFunc, move memnet Network impl
1 year ago
speedtest
all: update copyright and license headers
3 years ago
ssh-auth-none-demo
ssh,tempfork/gliderlabs/ssh: replace github.com/tailscale/golang-x-crypto/ssh with golang.org/x/crypto/ssh
1 year ago
stunc
cmd/stunc: enforce read timeout deadline ( #14309 )
1 year ago
stund
go.toolchain.branch: bump to go1.25 ( #16954 )
8 months ago
stunstamp
cmd/stunstamp: add protocol context to timeout logs ( #13422 )
2 years ago
sync-containers
…
systray
client/systray: allow specifying tailscaled socket
9 months ago
tailscale
syncs: delete WaitGroup and use sync.WaitGroup.Go in Go 1.25
8 months ago
tailscaled
wgengine/magicsock: shorten process internal DERP queue
8 months ago
testcontrol
…
testwrapper
.github/workflows: shard the Windows builder
11 months ago
tl-longchain
all: use new LocalAPI client package location
1 year ago
tsconnect
fix: invalid memory address or nil pointer dereference ( #16922 )
9 months ago
tsidp
cmd/tsidp: add allow-insecure-no-client-registration and JSON file migration ( #16881 )
8 months ago
tsshd
…
tta
all: use new LocalAPI client package location
1 year ago
viewer
cmd/viewer: add field comments to generated view methods
8 months ago
vnet
cmd/vnet: add wsproxy mode
1 year ago
xdpderper
tsweb: split promvarz into an optional dependency
1 year ago