You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
tailscale/ipn/ipnlocal
Nick Khyl 874db2173b ipn/{ipnauth,ipnlocal,ipnserver}: send the auth URL to the user who started interactive login
We add the ClientID() method to the ipnauth.Actor interface and updated ipnserver.actor to implement it.
This method returns a unique ID of the connected client if the actor represents one. It helps link a series
of interactions initiated by the client, such as when a notification needs to be sent back to a specific session,
rather than all active sessions, in response to a certain request.

We also add LocalBackend.WatchNotificationsAs and LocalBackend.StartLoginInteractiveAs methods,
which are like WatchNotifications and StartLoginInteractive but accept an additional parameter
specifying an ipnauth.Actor who initiates the operation. We store these actor identities in
watchSession.owner and LocalBackend.authActor, respectively,and implement LocalBackend.sendTo
and related helper methods to enable sending notifications to watchSessions associated with actors
(or, more broadly, identifiable recipients).

We then use the above to change who receives the BrowseToURL notifications:
 - For user-initiated, interactive logins, the notification is delivered only to the user who initiated the
   process. If the initiating actor represents a specific connected client, the URL notification is sent back
   to the same LocalAPI client that called StartLoginInteractive. Otherwise, the notification is sent to all
   clients connected as that user.
   Currently, we only differentiate between users on Windows, as it is inherently a multi-user OS.
 - In all other cases (e.g., node key expiration), we send the notification to all connected users.

Updates tailscale/corp#18342

Signed-off-by: Nick Khyl <nickk@tailscale.com>
1 month ago
..
testdata ipn/ipnlocal: fix the path for writing cert files (#7203) 2 years ago
autoupdate.go clientupdate: return true for CanAutoUpdate for macsys (#12746) 5 months ago
autoupdate_disabled.go ipn/ipnlocal: periodically run auto-updates when "offline" (#12118) 6 months ago
breaktcp_darwin.go cmd/tailscale: add debug commands to break connections 1 year ago
breaktcp_linux.go cmd/tailscale: add debug commands to break connections 1 year ago
c2n.go posture: add network hardware addresses to posture identity 5 months ago
c2n_pprof.go ipn/ipnlocal: add c2n /debug/pprof/allocs endpoint 8 months ago
c2n_test.go util/cmpx: delete now that we're using Go 1.22 10 months ago
cert.go cmd/tailscale: add --min-validity flag to the cert command (#12822) 4 months ago
cert_js.go ipn/ipnlocal: add c2n method to check on TLS cert fetch status 1 year ago
cert_test.go all: use Go 1.21 slices, maps instead of x/exp/{slices,maps} 1 year ago
dnsconfig_test.go ipn/ipnlocal: don't program system DNS when node key is expired (#13370) 3 months ago
drive.go types/views: add SliceView.All iterator (#13536) 2 months ago
expiry.go ssh/tailssh: use control server time instead of local time 1 year ago
expiry_test.go types/netmap, all: make NetworkMap.SelfNode a tailcfg.NodeView 1 year ago
local.go ipn/{ipnauth,ipnlocal,ipnserver}: send the auth URL to the user who started interactive login 1 month ago
local_test.go ipn/{ipnauth,ipnlocal,ipnserver}: send the auth URL to the user who started interactive login 1 month ago
loglines_test.go util/usermetrics: make usermetrics non-global 2 months ago
network-lock.go tka: truncate long rotation signature chains 3 months ago
network-lock_test.go tka: truncate long rotation signature chains 3 months ago
peerapi.go proxymap, various: distinguish between different protocols 5 months ago
peerapi_h2c.go all: update copyright and license headers 2 years ago
peerapi_macios_ext.go net/netmon, add: add netmon.State type alias of interfaces.State 7 months ago
peerapi_test.go util/usermetrics: make usermetrics non-global 2 months ago
profiles.go ipn/ipnlocal: refactor and cleanup profileManager 3 months ago
profiles_notwindows.go ipn/ipnlocal: refactor and cleanup profileManager 3 months ago
profiles_test.go ipn/ipnlocal: refactor and cleanup profileManager 3 months ago
profiles_windows.go ipn/ipnlocal: refactor and cleanup profileManager 3 months ago
serve.go ipn/ipnlocal: fix race condition that results in a panic sending on a closed channel 3 months ago
serve_test.go util/usermetrics: make usermetrics non-global 2 months ago
ssh.go ipnlocal: log failure to get ssh host keys 10 months ago
ssh_stub.go ipnlocal: log failure to get ssh host keys 10 months ago
ssh_test.go ipn/ipnlocal: plumb health.Tracker into profileManager constructor 7 months ago
state_test.go util/usermetrics: make usermetrics non-global 2 months ago
taildrop.go ipn/localapi: add support for multipart POST to file-put 8 months ago
web_client.go all: remove LenIter, use Go 1.22 range-over-int instead 9 months ago
web_client_stub.go ipn/ipnlocal: add mutex to webClient struct 1 year ago