BREAKING
- Authentication flow has been rewritten #2374 This change should be transparent to users with the exception of some buxfixes that has been discovered and was fixed as part of the rewrite.
- When a node is registered with a new user, it will be registered as a new node (#2327 and #1310).
- A logged out node logging in with the same user will replace the existing node.
- Remove support for Tailscale clients older than 1.62 (Capability version 87) #2405
Changes
oidc.map_legacy_users
is nowfalse
by default #2350- Print Tailscale version instead of capability versions for outdated nodes #2391
- Do not allow renaming of users from OIDC #2393
- Change minimum hostname length to 2 #2393
- Fix migration error caused by nodes having invalid auth keys #2412
- Pre auth keys belonging to a user are no longer deleted with the user #2396
- Pre auth keys that are used by a node can no longer be deleted #2396
- Rehaul HTTP errors, return better status code and errors to users #2398
Changelog
- [d5037c] date in changelog