Tailscale OAuth Key

Description

General

• Documentation: https://tailscale.com/kb/1215/oauth-clients/
• Summary: Tailscale is a zero-configuration virtual private network (VPN) solution, making it simple to create secure networks between computers, servers, and cloud instances. Tailscale supports an API to let customers automate various aspects of their network. The Oauth key allows the customer to authenticate to use this API, but unlike API keys the OAuth clients allow fine-grained control on the access granted to the clients using scopes.
• IPs allowlist: IP allowlists (or Block lists) are possible, see Tailscale IP Block lists.
• Scopes: This key grants access to applications in the tailnet using the Tailscale API.

Revoke the secret

The Oauth clients can be revoked in the Oauth page.

Check for suspicious activity

Keys and secrets activity can be monitored in the Logs page of the Tailscale admin consoles.

Details for Tailscale OAuth Key

• Family: oauth_token

• Category: remote_access

• Company: Tailscale

• High recall: True

• Validity check available: True

• Analyzer available: False

• On-premise instances exist: False

• Only valid secrets raise an alert: False

• Minimum number of matches: 1

• Occurrences found for one million commits: 0.02

• Prefixed: True

• PreValidators:

- type: ContentWhitelistPreValidator
  patterns:
    - tskey-client-

Examples

- text: "+TAILSCALE_CLIENT_KEY = 'tskey-client-bcSWBhEIi3B0-6zePybp9BncO6mwnVtWpj6qoIeLFgrYc'"
  apikey: tskey-client-bcSWBhEIi3B0-6zePybp9BncO6mwnVtWpj6qoIeLFgrYc

# Fat-fingered secret
- text: Xtskey-client-bcSWBhEIi3B0-6zePybp9BncO6mwnVtWpj6qoIeLFgrYc
  apikey: tskey-client-bcSWBhEIi3B0-6zePybp9BncO6mwnVtWpj6qoIeLFgrYc