headscale/hscontrol/state
Kristoffer Dalby 0451dd4718 state: allow untagging nodes via reauth with empty RequestTags
When a node re-authenticates via OIDC/web auth with empty RequestTags
(from `tailscale up --advertise-tags= --force-reauth`), remove all tags
and return ownership to the authenticating user.

This allows nodes to transition from any tagged state (including nodes
originally registered with a tagged pre-auth key) back to user-owned.

Fixes #2979
2026-01-17 10:13:24 +01:00
..
debug.go cli: ensure tagged-devices is included in profile list (#2991) 2026-01-09 16:31:23 +01:00
debug_test.go hscontrol/state: make NodeStore batch configuration tunable (#2886) 2025-11-28 16:38:29 +01:00
endpoint_test.go hscontrol/state: make NodeStore batch configuration tunable (#2886) 2025-11-28 16:38:29 +01:00
ephemeral_test.go hscontrol/state: make NodeStore batch configuration tunable (#2886) 2025-11-28 16:38:29 +01:00
maprequest.go stability and race conditions in auth and node store (#2781) 2025-10-16 12:17:43 +02:00
maprequest_test.go make tags first class node owner (#2885) 2025-12-02 12:01:25 +01:00
node_store.go cli: ensure tagged-devices is included in profile list (#2991) 2026-01-09 16:31:23 +01:00
node_store_test.go policy: more accurate node change 2025-12-16 10:12:36 +01:00
state.go state: allow untagging nodes via reauth with empty RequestTags 2026-01-17 10:13:24 +01:00
tags.go tags: process tags on registration, simplify policy (#2931) 2025-12-08 18:51:07 +01:00
test_helpers.go hscontrol/state: make NodeStore batch configuration tunable (#2886) 2025-11-28 16:38:29 +01:00