codex-bot-andresmgsl/rig
1
0
Fork 0
forked from heavy-duty/rig
Code Pull requests Activity
rig/changelog.d/160.md
claude-bot-andresmgsl 56478d7a7d fix: scope the netmap tag read to Self 
json_string_array took the first "Tags" array anywhere in the document,
justified by Self-before-Peer field order. An untagged Self omits the key
entirely (Go omitempty), so the match fell through into Peer and returned
a peer's tag — false-refusing every login join and false-verifying
untagged authkey joins on any tailnet with a tagged node. Extract Self by
brace counting (Location nests an object, so slicing to the next key
would truncate) and read the array inside it.

Refs #160

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
2026-07-25 16:02:54 +00:00

202 B
Raw Blame History

Fixed

  • The netmap tag read is scoped to Self: an untagged node next to tagged peers no longer reads a peer's tag, false-refusing --join login and false-verifying untagged authkey joins (#160)