Starstruk Logo MarkStarstruk

v0.25.0

juanfont/headscalev0.25.0Feb 11, 2025by github-actions[bot]

AI Summary

A major release rewriting the authentication flow and removing support for older Tailscale clients, introducing changes to hostname length and user/node association.

Key Highlights

  • Authentication flow rewritten: New nodes registered with a new user become new nodes.
  • Minimum supported Tailscale client version increased to v1.62.
  • 'oidc.map_legacy_users' now defaults to 'false'.

Breaking Changes

  • Authentication flow rewritten (nodes registered with new user become new nodes).
  • Remove support for Tailscale clients older than v1.62.
  • Do not allow renaming of users from OIDC.
  • Change minimum hostname length to 2.

Full Release Notes

### BREAKING

- Authentication flow has been rewritten
  [#2374](https://github.com/juanfont/headscale/pull/2374) This change should be
  transparent to users with the exception of some buxfixes that has been
  discovered and was fixed as part of the rewrite.
  - When a node is registered with _a new user_, it will be registered as a new
    node ([#2327](https://github.com/juanfont/headscale/issues/2327) and
    [#1310](https://github.com/juanfont/headscale/issues/1310)).
  - A logged out node logging in with the same user will replace the existing
    node.
- Remove support for Tailscale clients older than 1.62 (Capability version 87)
      [#2405](https://github.com/juanfont/headscale/pull/2405)

### Changes

- `oidc.map_legacy_users` is now `false` by default
  [#2350](https://github.com/juanfont/headscale/pull/2350)
- Print Tailscale version instead of capability versions for outdated nodes
  [#2391](https://github.com/juanfont/headscale/pull/2391)
- Do not allow renaming of users from OIDC
  [#2393](https://github.com/juanfont/headscale/pull/2393)
- Change minimum hostname length to 2
  [#2393](https://github.com/juanfont/headscale/pull/2393)
- Fix migration error caused by nodes having invalid auth keys
  [#2412](https://github.com/juanfont/headscale/pull/2412)
- Pre auth keys belonging to a user are no longer deleted with the user
  [#2396](https://github.com/juanfont/headscale/pull/2396)
- Pre auth keys that are used by a node can no longer be deleted
  [#2396](https://github.com/juanfont/headscale/pull/2396)
- Rehaul HTTP errors, return better status code and errors to users
  [#2398](https://github.com/juanfont/headscale/pull/2398)

### Changelog
* d5037c25a6a663cc908e5eba65a0f24e240d3d9a date in changelog