headscale/hscontrol
Fredrik Ekre 5aeeff98d0
Some checks failed
Build / build-nix (push) Waiting to run
Build / build-cross (GOARCH=amd64 GOOS=darwin) (push) Waiting to run
Build / build-cross (GOARCH=amd64 GOOS=linux) (push) Waiting to run
Build / build-cross (GOARCH=arm64 GOOS=darwin) (push) Waiting to run
Build / build-cross (GOARCH=arm64 GOOS=linux) (push) Waiting to run
Check Generated Files / check-generated (push) Waiting to run
Nix Flake Checks / build (push) Waiting to run
Nix Flake Checks / gotest (push) Waiting to run
Nix Flake Checks / golangci-lint (push) Waiting to run
Nix Flake Checks / formatting (push) Waiting to run
NixOS Module Tests / nix-module-check (push) Waiting to run
Server Tests / servertest (push) Waiting to run
Build (main) / container (push) Has been cancelled
Build (main) / binaries (amd64, darwin) (push) Has been cancelled
Build (main) / binaries (amd64, linux) (push) Has been cancelled
Build (main) / binaries (arm64, darwin) (push) Has been cancelled
Build (main) / binaries (arm64, linux) (push) Has been cancelled
oidc: fix NewProvider ignoring caller context timeout
NewAuthProviderOIDC received a context with a 30-second timeout from
its caller, but immediately discarded it by passing context.Background()
to oidc.NewProvider. This caused both `headscale serve` and
`headscale configtest` to hang indefinitely if the OIDC issuer was
unreachable, rather than timing out and returning an error.

Fix by passing the caller's ctx to oidc.NewProvider and remove the
nolint:contextcheck annotation that was suppressing the linter warning
about this bug. The annotation was introduced in ce580f82 as part of a
bulk lint-suppression pass without addressing the underlying issue.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
2026-06-24 19:03:00 +02:00
..
api api/v2: simplify endpoint comments 2026-06-24 18:41:06 +02:00
assets assets: fix logo alignment and error icon centering 2026-04-13 17:23:47 +01:00
capver all: adopt slices helpers 2026-06-17 16:12:19 +02:00
db api/v2: soft-revoke auth keys with a configurable collector 2026-06-21 04:17:03 +02:00
derp all: fix full-tree golangci-lint findings 2026-06-20 21:08:01 +02:00
dns dns, change, noise, auth, capver: misc consolidation 2026-06-17 16:12:19 +02:00
mapper all: fix full-tree golangci-lint findings 2026-06-20 21:08:01 +02:00
policy policy: allow the tailscale.com/cap/secrets capability 2026-06-24 18:41:33 +02:00
servertest servertest: roundtrip v2 users and 4via6 through the clients 2026-06-24 18:41:06 +02:00
state api/v2: soft-revoke auth keys with a configurable collector 2026-06-21 04:17:03 +02:00
templates templates: consolidate shared page and component helpers 2026-06-17 16:12:19 +02:00
testdata/apiv1_golden test: add golden parity tests for the v1 API 2026-06-19 15:21:00 +02:00
types api/v2: soft-revoke auth keys with a configurable collector 2026-06-21 04:17:03 +02:00
util all: fix full-tree golangci-lint findings 2026-06-20 21:08:01 +02:00
apiv1_apikeys_test.go test: add golden parity tests for the v1 API 2026-06-19 15:21:00 +02:00
apiv1_auth_test.go test: add golden parity tests for the v1 API 2026-06-19 15:21:00 +02:00
apiv1_authmw_test.go test: add golden parity tests for the v1 API 2026-06-19 15:21:00 +02:00
apiv1_client_test.go gen/client/v1: add the generated HTTP client 2026-06-19 15:21:00 +02:00
apiv1_harness_test.go test: add golden parity tests for the v1 API 2026-06-19 15:21:00 +02:00
apiv1_health_test.go test: add golden parity tests for the v1 API 2026-06-19 15:21:00 +02:00
apiv1_nodes_test.go test: add golden parity tests for the v1 API 2026-06-19 15:21:00 +02:00
apiv1_policy_test.go test: add golden parity tests for the v1 API 2026-06-19 15:21:00 +02:00
apiv1_preauthkeys_test.go test: add golden parity tests for the v1 API 2026-06-19 15:21:00 +02:00
apiv1_socket_test.go gen/client/v1: add the generated HTTP client 2026-06-19 15:21:00 +02:00
apiv1_users_test.go test: add golden parity tests for the v1 API 2026-06-19 15:21:00 +02:00
apiv2_acl_test.go hscontrol: add v2 API contract tests 2026-06-21 04:17:03 +02:00
apiv2_devices_test.go hscontrol: add v2 API contract tests 2026-06-21 04:17:03 +02:00
apiv2_keys_test.go hscontrol: collapse key and settings asserts into cmp.Diff 2026-06-24 18:41:06 +02:00
apiv2_settings_test.go hscontrol: collapse key and settings asserts into cmp.Diff 2026-06-24 18:41:06 +02:00
apiv2_users_test.go hscontrol: contract-test the v2 users endpoint 2026-06-24 18:41:06 +02:00
app.go api/v2: soft-revoke auth keys with a configurable collector 2026-06-21 04:17:03 +02:00
app_test.go app: add security headers middleware 2026-04-17 16:31:49 +01:00
auth.go dns, change, noise, auth, capver: misc consolidation 2026-06-17 16:12:19 +02:00
auth_tags_test.go hscontrol: remove the proto, gRPC and grpc-gateway stack 2026-06-19 15:21:00 +02:00
auth_test.go state: return all nodes for a machine key, reject ambiguous ownership 2026-06-15 20:29:15 +02:00
debug.go all: adopt slices helpers 2026-06-17 16:12:19 +02:00
handlers.go handlers: set verify Content-Type before writing the body 2026-06-17 16:12:19 +02:00
handlers_test.go handlers: set verify Content-Type before writing the body 2026-06-17 16:12:19 +02:00
metrics.go metrics, policy/v2: drop unused scaffolding + nil-error returns 2026-05-19 09:55:22 +02:00
noise.go dns, change, noise, auth, capver: misc consolidation 2026-06-17 16:12:19 +02:00
noise_test.go noise: re-delegate SSH check when the auth session is missing (#3306) 2026-06-10 11:48:02 +02:00
oidc.go oidc: fix NewProvider ignoring caller context timeout 2026-06-24 19:03:00 +02:00
oidc_confirm_test.go all: annotate gosec false positives with rationale 2026-05-19 09:55:22 +02:00
oidc_cookiename_test.go oidc: avoid slice panic in getCookieName for short values 2026-06-08 10:04:49 +02:00
oidc_template_test.go oidc: render HTML error pages for browser-facing failures 2026-04-13 17:23:47 +01:00
oidc_test.go all: fix full-tree golangci-lint findings 2026-06-20 21:08:01 +02:00
platform_config.go hscontrol: consolidate debug-endpoint and template helpers 2026-06-17 16:12:19 +02:00
platform_config_test.go hscontrol: read Apple platform via chi.URLParam, not mux.Vars 2026-06-05 15:00:59 +02:00
poll.go state, poll: refcount poll sessions, mark offline only on last release 2026-06-11 16:28:25 +02:00
poll_test.go all: apply godoc [Name] link conventions across comments 2026-05-19 09:55:22 +02:00
realip.go all: adopt slices helpers 2026-06-17 16:12:19 +02:00
realip_test.go hscontrol: gate proxy header trust on trusted_proxies 2026-05-18 17:17:55 +02:00
tailsql.go policy, mapper, capver, hscontrol: remove dead code 2026-06-17 16:12:19 +02:00
templates_consistency_test.go Update links to Tailscale documentation 2026-04-18 09:33:41 +02:00