fix(gateway): scope tailscale tokenless auth to websocket

2026-05-08 06:51:23 +00:00 · 2026-02-21 13:03:08 +01:00
parent 6aa11f3092
commit 356d61aacf
16 changed files with 134 additions and 15 deletions
--- a/src/gateway/server/ws-connection/message-handler.ts
+++ b/src/gateway/server/ws-connection/message-handler.ts
@@ -351,6 +351,7 @@ export function attachGatewayWsMessageHandler(params: {
          connectAuth: connectParams.auth,
          req: upgradeReq,
          trustedProxies,
+          allowTailscaleHeaderAuth: true,
          rateLimiter: hasDeviceTokenCandidate ? undefined : rateLimiter,
          clientIp,
          rateLimitScope: AUTH_RATE_LIMIT_SCOPE_SHARED_SECRET,