prevent clients from sending ready_for_handshake

coadler · coadler · commit 134737034f98 · 2024-04-10T21:59:08.000Z
diff --git a/tailnet/tunnel.go b/tailnet/tunnel.go
@@ -52,6 +52,10 @@ func (c ClientCoordinateeAuth) Authorize(req *proto.CoordinateRequest) error {
 		}
 	}
 
+	if rfh := req.GetReadyForHandshake(); rfh != nil {
+		return xerrors.Errorf("clients may not send ready_for_handshake")
+	}
+
 	return nil
 }
 

Original file line number	Diff line number	Diff line change
`@@ -52,6 +52,10 @@ func (c ClientCoordinateeAuth) Authorize(req *proto.CoordinateRequest) error {`
`52`	`52`	`}`
`53`	`53`	`}`
`54`	`54`
	`55`	`+ if rfh := req.GetReadyForHandshake(); rfh != nil {`
	`56`	`+ return xerrors.Errorf("clients may not send ready_for_handshake")`
	`57`	`+ }`
	`58`	`+`
`55`	`59`	`return nil`
`56`	`60`	`}`
`57`	`61`