Andrey Bobelev 5cd15c3656 fix: make state cookies valid when client uses multiple login URLs ...

On Windows, if the user clicks the Tailscale icon in the system tray,
it opens a login URL in the browser.

When the login URL is opened, `state/nonce` cookies are set for that particular URL.

If the user clicks the icon again, a new login URL is opened in the browser,
and new cookies are set.

If the user proceeds with auth in the first tab,
the redirect results in a "state did not match" error.

This patch ensures that each opened login URL sets an individual cookie
that remains valid on the `/oidc/callback` page.

`TestOIDCMultipleOpenedLoginUrls` illustrates and tests this behavior.

2025-11-10 16:27:46 +01:00

..

assets

update flake, fix prettier lint

2023-09-05 08:47:43 +02:00

capver

policy: fix autogroup:self propagation and optimize cache invalidation (#2807)

2025-10-23 17:57:41 +02:00

db

state: use AllApprovedRoutes instead of SubnetRoutes

2025-11-02 13:19:59 +01:00

derp

Fix flaky TestShuffleDERPMapDeterministic by ensuring deterministic map iteration (#2848)

2025-11-02 10:05:23 +01:00

dns

integration: replace time.Sleep with assert.EventuallyWithT (#2680)

2025-07-10 23:38:55 +02:00

mapper

state: use AllApprovedRoutes instead of SubnetRoutes

2025-11-02 13:19:59 +01:00

policy

matcher: Add func for comparing Dests and TheInternet

2025-11-02 13:19:59 +01:00

routes

debug: add json and improve

2025-09-09 09:40:00 +02:00

state

state: use AllApprovedRoutes instead of SubnetRoutes

2025-11-02 13:19:59 +01:00

templates

integration: replace time.Sleep with assert.EventuallyWithT (#2680)

2025-07-10 23:38:55 +02:00

types

types: Distinguish subnet and exit node access

2025-11-02 13:19:59 +01:00

util

stricter hostname validation and replace (#2383)

2025-10-22 13:50:39 +02:00

app.go

hscontrol: add /version HTTP endpoint (#2821)

2025-10-27 10:41:34 +01:00

auth_test.go

stability and race conditions in auth and node store (#2781)

2025-10-16 12:17:43 +02:00

auth.go

stricter hostname validation and replace (#2383)

2025-10-22 13:50:39 +02:00

debug.go

lint and leftover

2025-09-09 09:40:00 +02:00

grpcv1_test.go

rename package name to hscontrol

2023-05-10 20:47:51 +02:00

grpcv1.go

expire nodes with a custom timestamp (#2828)

2025-11-01 08:09:13 +01:00

handlers.go

hscontrol: add /version HTTP endpoint (#2821)

2025-10-27 10:41:34 +01:00

metrics.go

integration: replace time.Sleep with assert.EventuallyWithT (#2680)

2025-07-10 23:38:55 +02:00

noise.go

lint and leftover

2025-09-09 09:40:00 +02:00

oidc.go

fix: make state cookies valid when client uses multiple login URLs

2025-11-10 16:27:46 +01:00

platform_config.go

Return better web errors to the user (#2398)

2025-02-01 15:25:18 +01:00

poll.go

stability and race conditions in auth and node store (#2781)

2025-10-16 12:17:43 +02:00

suite_test.go

Redo OIDC configuration (#2020)

2024-10-02 14:50:17 +02:00

tailsql.go

integration: replace time.Sleep with assert.EventuallyWithT (#2680)

2025-07-10 23:38:55 +02:00