v0.25.0

BREAKING

• Authentication flow has been rewritten
  #2374 This change should be
  transparent to users with the exception of some buxfixes that has been
  discovered and was fixed as part of the rewrite.
  • When a node is registered with a new user, it will be registered as a new
    node (#2327 and
    #1310).
  • A logged out node logging in with the same user will replace the existing
    node.
• Remove support for Tailscale clients older than 1.62 (Capability version 87)
  #2405

Changes

• oidc.map_legacy_users is now false by default
  #2350
• Print Tailscale version instead of capability versions for outdated nodes
  #2391
• Do not allow renaming of users from OIDC
  #2393
• Change minimum hostname length to 2
  #2393
• Fix migration error caused by nodes having invalid auth keys
  #2412
• Pre auth keys belonging to a user are no longer deleted with the user
  #2396
• Pre auth keys that are used by a node can no longer be deleted
  #2396
• Rehaul HTTP errors, return better status code and errors to users
  #2398

Changelog

• d5037c2 date in changelog