rig/commands/lib
claude-bot-andresmgsl 56478d7a7d fix: scope the netmap tag read to Self
json_string_array took the first "Tags" array anywhere in the document,
justified by Self-before-Peer field order. An untagged Self omits the key
entirely (Go omitempty), so the match fell through into Peer and returned
a peer's tag — false-refusing every login join and false-verifying
untagged authkey joins on any tailnet with a tagged node. Extract Self by
brace counting (Location nests an object, so slicing to the next key
would truncate) and read the array inside it.

Refs #160

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
2026-07-25 16:02:54 +00:00
..
manifest.sh fix: read a manifest's final line when the file has no trailing newline 2026-07-20 12:48:39 +00:00
runner-config.sh fix: scope the netmap tag read to Self 2026-07-25 16:02:54 +00:00
sshd.sh fix: don't read a missing /run/sshd as a broken sshd config 2026-07-20 17:58:10 +00:00
templates.sh feat: add registry-backed machine roles 2026-07-25 10:57:52 +00:00
users-config.sh fix(users): the root-door resolver matches whole fields, not substrings 2026-07-20 11:18:37 +00:00