Method Authorize

tailnet/tunnel.go:48–61

(_ context.Context, req *proto.CoordinateRequest)

}

func (c ClientCoordinateeAuth) Authorize(_ context.Context, req *proto.CoordinateRequest) error {
	if tun := req.GetAddTunnel(); tun != nil {
		uid, err := uuid.FromBytes(tun.Id)
		if err != nil {
			return xerrors.Errorf("parse add tunnel id: %w", err)
		}

		if c.AgentID != uid {
			return xerrors.Errorf("invalid agent id, expected %s, got %s", c.AgentID.String(), uid.String())
		}
	}

	return handleClientNodeRequests(req)
}

// AgentCoordinateeAuth disallows all tunnels, since agents are not allowed to initiate their own tunnels
type AgentCoordinateeAuth struct {