Some of the most common requests we get for the @Tailscale API relate to authentication. Users want the ability to create credentials with fine-grained permissions, more than 90 days expiration, and keys that aren't tied to individual user accounts. It took a little longer than expected, but I'm happy to say that what was actually my starter project(?!) with @jordanwhited@inuh.net has shipped: OAuth support for the API. https://tailscale.com/blog/oauth/