feat: enforce user isolation for shared Headscale management APIs - #2

Merged

0x7fffff92 merged 1 commit into

mainfrom

feat/secure-shared-headscale-api

Sep 24, 2026

0x7fffff92 commented Sep 24, 2026

Member

Summary

Secure shared Headscale APIs with Olares user authentication.

Only return nodes owned by the current user.
Check ownership before deleting, renaming, or approving routes.
Remove obsolete internal proxy, user transfer, and tag management APIs.


          feat: secure shared headscale management APIs

a4348ae

0x7fffff92 merged commit ed37878 into main

1 check passed

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet