You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
 
 
 
 
 
 
Go to file
Naman Sood f79183dac7
cmd/tsidp: add funnel support (#12591)
* cmd/tsidp: add funnel support

Updates #10263.

Signed-off-by: Naman Sood <mail@nsood.in>

* look past funnel-ingress-node to see who we're authenticating

Signed-off-by: Naman Sood <mail@nsood.in>

* fix comment typo

Signed-off-by: Naman Sood <mail@nsood.in>

* address review feedback, support Basic auth for /token

Turns out you need to support Basic auth if you do client ID/secret
according to OAuth.

Signed-off-by: Naman Sood <mail@nsood.in>

* fix typos

Signed-off-by: Naman Sood <mail@nsood.in>

* review fixes

Signed-off-by: Naman Sood <mail@nsood.in>

* remove debugging log

Signed-off-by: Naman Sood <mail@nsood.in>

* add comments, fix header

Signed-off-by: Naman Sood <mail@nsood.in>

---------

Signed-off-by: Naman Sood <mail@nsood.in>
3 months ago
.bencher
.github
appc
atomicfile various: add golangci-lint, fix issues (#7905) 2 years ago
chirp
client
clientupdate clientupdate: return true for CanAutoUpdate for macsys (#12746) 4 months ago
cmd cmd/tsidp: add funnel support (#12591) 3 months ago
control control/controlhttp: extract the last network connection 3 months ago
derp cmd/derper: move 204 handler from package main to derphttp 3 months ago
disco
docs
doctor
drive
envknob
gokrazy tstest/natlab/vnet: add start of virtual network-based NAT Lab 3 months ago
health health: don't show login error details with context cancelations 3 months ago
hostinfo
internal
ipn cmd/tsidp: add funnel support (#12591) 3 months ago
jsondb
k8s-operator cmd/k8s-operator,k8s-operator/sessionrecording,sessionrecording,ssh/tailssh: refactor session recording functionality (#12945) 4 months ago
kube all: add test for package comments, fix, add comments as needed 4 months ago
licenses licenses: update license notices 3 months ago
log
logpolicy
logtail logtail: close idle HTTP connections on shutdown 4 months ago
metrics
net {control,net}: close idle connections of custom transports 3 months ago
omit
packages/deb
paths
portlist
posture
prober prober: support JSON response in RunHandler 3 months ago
proxymap
publicapi
release
safesocket
safeweb
scripts
sessionrecording cmd/k8s-operator,k8s-operator/sessionrecording,sessionrecording,ssh/tailssh: refactor session recording functionality (#12945) 4 months ago
smallzstd
ssh/tailssh cmd/k8s-operator,k8s-operator/sessionrecording,sessionrecording,ssh/tailssh: refactor session recording functionality (#12945) 4 months ago
syncs
tailcfg net/packet/checksum: fix v6 NAT 3 months ago
taildrop
tempfork cmd/tailscale: add shell tab-completion 7 months ago
tka
tool
tsconst
tsd
tsnet
tstest tstest/natlab/vnet: add start of virtual network-based NAT Lab 3 months ago
tstime
tsweb tsweb: mark TestStdHandler_ConnectionClosedDuringBody flaky 3 months ago
types types/lazy: re-init SyncValue during test cleanup if it wasn't set before SetForTest 4 months ago
util util/linuxfw: return nil interface not concrete type 3 months ago
version
wf all: add test for package comments, fix, add comments as needed 4 months ago
wgengine wgengine/magicsock: refactor batchingUDPConn to batchingConn interface (#13042) 3 months ago
words words: raccoon dog, dog with the raccoon in 'im 3 months ago
.gitattributes
.gitignore
.golangci.yml
ALPINE.txt
AUTHORS
CODEOWNERS
CODE_OF_CONDUCT.md
Dockerfile Dockerfile: add a warning that this is not used to build our published images (#12955) 4 months ago
Dockerfile.base
LICENSE
Makefile
PATENTS
README.md
SECURITY.md
VERSION.txt
api.md
build_dist.sh
build_docker.sh build_docker.sh: update script comment (#12970) 4 months ago
flake.lock
flake.nix go.mod.sri: update SRI hash for go.mod changes 3 months ago
go.mod tstest/natlab/vnet: add start of virtual network-based NAT Lab 3 months ago
go.mod.sri go.mod.sri: update SRI hash for go.mod changes 3 months ago
go.sum tstest/natlab/vnet: add start of virtual network-based NAT Lab 3 months ago
go.toolchain.branch
go.toolchain.rev
gomod_test.go
header.txt
pkgdoc_test.go
pull-toolchain.sh
shell.nix go.mod.sri: update SRI hash for go.mod changes 3 months ago
staticcheck.conf
update-flake.sh
version-embed.go
version_test.go

README.md

Tailscale

https://tailscale.com

Private WireGuard® networks made easy

Overview

This repository contains the majority of Tailscale's open source code. Notably, it includes the tailscaled daemon and the tailscale CLI tool. The tailscaled daemon runs on Linux, Windows, macOS, and to varying degrees on FreeBSD and OpenBSD. The Tailscale iOS and Android apps use this repo's code, but this repo doesn't contain the mobile GUI code.

Other Tailscale repos of note:

For background on which parts of Tailscale are open source and why, see https://tailscale.com/opensource/.

Using

We serve packages for a variety of distros and platforms at https://pkgs.tailscale.com.

Other clients

The macOS, iOS, and Windows clients use the code in this repository but additionally include small GUI wrappers. The GUI wrappers on non-open source platforms are themselves not open source.

Building

We always require the latest Go release, currently Go 1.22. (While we build releases with our Go fork, its use is not required.)

go install tailscale.com/cmd/tailscale{,d}

If you're packaging Tailscale for distribution, use build_dist.sh instead, to burn commit IDs and version info into the binaries:

./build_dist.sh tailscale.com/cmd/tailscale
./build_dist.sh tailscale.com/cmd/tailscaled

If your distro has conventions that preclude the use of build_dist.sh, please do the equivalent of what it does in your distro's way, so that bug reports contain useful version information.

Bugs

Please file any issues about this code or the hosted service on the issue tracker.

Contributing

PRs welcome! But please file bugs. Commit messages should reference bugs.

We require Developer Certificate of Origin Signed-off-by lines in commits.

See git log for our commit message style. It's basically the same as Go's style.

About Us

Tailscale is primarily developed by the people at https://github.com/orgs/tailscale/people. For other contributors, see:

WireGuard is a registered trademark of Jason A. Donenfeld.