Method Authorize

tailnet/tunnel.go:116–129

(ctx context.Context, req *proto.CoordinateRequest)

}

func (a ClientUserCoordinateeAuth) Authorize(ctx context.Context, req *proto.CoordinateRequest) error {
	if tun := req.GetAddTunnel(); tun != nil {
		uid, err := uuid.FromBytes(tun.Id)
		if err != nil {
			return xerrors.Errorf("parse add tunnel id: %w", err)
		}
		err = a.Auth.AuthorizeTunnel(ctx, uid)
		if err != nil {
			return xerrors.Errorf("workspace agent not found or you do not have permission")
		}
	}

	return handleClientNodeRequests(req)
}

// handleClientNodeRequests validates GetUpdateSelf requests and declines ReadyForHandshake requests
func handleClientNodeRequests(req *proto.CoordinateRequest) error {