You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Nick Khyl f1c7b463cd ipn/{ipnauth,ipnlocal,localapi}: make EditPrefs return an error if changing exit node is restricted by policy ... We extract checkEditPrefsAccessLocked, adjustEditPrefsLocked, and onEditPrefsLocked from the EditPrefs execution path, defining when each step is performed and what behavior is allowed at each stage. Currently, this is primarily used to support Always On mode, to handle the Exit Node enablement toggle, and to report prefs edit metrics. We then use it to enforce Exit Node policy settings by preventing users from setting an exit node and making EditPrefs return an error when an exit node is restricted by policy. This enforcement is also extended to the Exit Node toggle. These changes prepare for supporting Exit Node overrides when permitted by policy and preventing logout while Always On mode is enabled. In the future, implementation of these methods can be delegated to ipnext extensions via the feature hooks. Updates tailscale/corp#29969 Updates tailscale/corp#26249 Signed-off-by: Nick Khyl <nickk@tailscale.com>		6 months ago
..
auditlog	ipn/ipnext: remove some interface indirection to add hooks	8 months ago
conffile	ipn/conffile: don't depend on hujson on iOS/Android	1 year ago
desktop	ipn/ipnext: remove some interface indirection to add hooks	8 months ago
ipnauth	ipn/{ipnauth,ipnlocal,localapi}: make EditPrefs return an error if changing exit node is restricted by policy	6 months ago
ipnext	ipn/ipnlocal: make GetExt work earlier, before extension init	7 months ago
ipnlocal	ipn/{ipnauth,ipnlocal,localapi}: make EditPrefs return an error if changing exit node is restricted by policy	6 months ago
ipnserver	ipn: add missing entries for OpenBSD	6 months ago
ipnstate	Revert "ipn/ipnstate: add home DERP to tailscale status JSON"	9 months ago
lapitest	ipn/ipn{server,test}: extract the LocalAPI test client and server into ipntest	8 months ago
localapi	ipn/{ipnauth,ipnlocal,localapi}: make EditPrefs return an error if changing exit node is restricted by policy	6 months ago
policy	ipn,tailconfig: clean up unreleased and removed app connector service	2 years ago
store	ipn/store: make StateStore.All optional (#16409)	6 months ago
backend.go	ipn: add watch opt to include actions in health messages	7 months ago
conf.go	ipn: ensure that conffile is source of truth for advertised services. (#15361)	9 months ago
doc.go	ipn: generate LoginProfileView and use it instead of *LoginProfile where appropriate	11 months ago
ipn_clone.go	cmd/tailscale/cli,ipn,ipn/ipnlocal: add AutoExitNode preference for automatic exit node selection	6 months ago
ipn_test.go	all: do not depend on the testing package	2 years ago
ipn_view.go	cmd/tailscale/cli,ipn,ipn/ipnlocal: add AutoExitNode preference for automatic exit node selection	6 months ago
prefs.go	cmd/tailscale/cli,ipn,ipn/ipnlocal: add AutoExitNode preference for automatic exit node selection	6 months ago
prefs_test.go	cmd/tailscale/cli,ipn,ipn/ipnlocal: add AutoExitNode preference for automatic exit node selection	6 months ago
serve.go	tailcfg: add ServiceName	11 months ago
serve_test.go	scripts/check_license_headers.sh: delete, rewrite as a Go test	6 months ago
store.go	tailcfg: report StateEncrypted in Hostinfo (#16434)	6 months ago
store_test.go	ipn/store: automatically migrate between plaintext and encrypted state (#16318)	6 months ago