identity property

Identity of the calling tailnet node, resolved at accept time.

Populated when remote maps to a known tailnet node — the same accept-time resolution that backs TailscaleConnection.identity. Null for public Funnel requests (which originate outside the tailnet), and null when the lookup found nothing or failed — resolution is best-effort and never blocks the request. For a hard identity check you can still call Tailscale.instance.whois(remote.address).

This is the in-process counterpart to the Tailscale-User-Login headers that serve.forward exposes; here you get the typed identity directly.