V1.2.7

[gm852]

Fixes for Headscale v0.28 API keys

What changed

• apiKeyUtils.ts — normalize keys, classify hskey-api vs hskey-auth vs legacy, match masked prefixes, prefer expire-by-id
• Auth — always send Bearer <normalized key>; never let caller headers drop Bearer
• Login / add account — clearer errors (pre-auth key pasted, network vs auth, v0.28 format hint)
• API keys screen — expire by id when available; match active key against masked prefixes
• UI copy — points at headscale apikeys create and the hskey-api-… format

Support for Headscale v0.29

API / versioning

• New v0.29 entry in apiVersions.ts
• Version selectors include 0.29.x (default)
• isV029OrHigher() helper; unknown versions fall back to v0.29

Auth (main API change)

• Registration uses POST /api/v1/auth/register with { user, authId }
• Approve / reject via /api/v1/auth/approve and /reject
• Register modal accepts auth IDs or full headscale auth … commands
• Approve / Reject buttons on v0.29

Policy / ACL

• POST /api/v1/policy/check before save on v0.29+
• Surfaces grants / nodeAttrs / tests / sshTests validation errors
• ACL screen notes v0.29 policy features

Device UI

• Expiry shows Never for null / zero-dates (v0.29 backfill)
• Shows raw Hostname when it differs from MagicDNS givenName
• Hides “Change user” on v0.28+ (MoveNode removed)

+ Minor QOL Fixes

[github-actions]

==================================================
||        ✅ ESLint Checks Passed! 🎉          ||
==================================================

All linting checks completed successfully. You can now request a review.