3 Commits

Author	SHA1	Message	Date
Aarnav Tale	684a95b5e8	fix: harden user linking and session pruning ... Security: - Add unique constraint on headscale_user_id to prevent hijacking - linkHeadscaleUser now rejects already-claimed Headscale users - Onboarding dropdown filters out claimed users - onboarding-skip action redirects on rejected claims Maintenance: - Replace probabilistic session pruning with setInterval (15m) - Move pruning out of request path into server startup Co-authored-by: Amp <amp@ampcode.com> Amp-Thread-ID: https://ampcode.com/threads/T-019cce57-c9e1-7732-9709-8288127573a9	2026-03-08 17:34:55 -04:00
Aarnav Tale	45984ec639	chore: remove deprecated oidc.user_storage_file option ... The flat-file user store has been deprecated for several versions. All user data now lives in the SQL database. Removes the config field, nix option, docs, and migration logic. Co-authored-by: Amp <amp@ampcode.com> Amp-Thread-ID: https://ampcode.com/threads/T-019cce57-c9e1-7732-9709-8288127573a9	2026-03-08 17:34:49 -04:00
Aarnav Tale	0f8e192b5c	feat: initial auth rework	2026-03-07 17:10:34 -05:00