You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Jonathan Nobels 1bf4c6481a safesocket: add ability for Darwin clients to set explicit credentials (#14702) ... updates tailscale/corp#25687 The darwin appstore and standalone clients now support XPC and the keychain for passing user credentials securely between the gui process and an NEVPNExtension hosted tailscaled. Clients that can communicate directly with the network extension, via XPC or the keychain, are now expected to call SetCredentials and supply credentials explicitly, fixing issues with the cli breaking if the current user cannot read the contents of /Library/Tailscale due to group membership restrictions. This matches how those clients source and supply credentials to the localAPI http client. Non-platform-specific code that has traditionally been in the client is moved to safesocket. /Libraray/Tailscaled/sameuserproof has its permissions changed to that it's readably only by users in the admin group. This restricts standalone CLI access for and direct use of localAPI to admins. Signed-off-by: Jonathan Nobels <jonathan@tailscale.com>		1 year ago
..
actor.go	ipn/{ipnauth,ipnlocal,ipnserver}: move the AlwaysOn policy check from ipnserver to ipnauth	1 year ago
proxyconnect.go	Switch logging service from log.tailscale.io to log.tailscale.com (#14398)	1 year ago
proxyconnect_js.go	all: update copyright and license headers	3 years ago
server.go	safesocket: add ability for Darwin clients to set explicit credentials (#14702)	1 year ago
server_test.go	all: use new LocalAPI client package location	1 year ago