Error: 'Request Header is Too Large' on First Login

Short description

When attempting to log in for the first time, the following error is encountered: "Request header is too large." This issue consistently occurs during initial login attempts and appears to be related to the size of the request header being sent. It only resolves when using an incognito window.

The problem is related to the maxHttpHeaderSize parameter, which defaults to 8 KB or 8192 bytes. We may consider increasing this value to 64 KB or 65536 bytes. When I added <entry key="maxHttpHeaderSize" value="65536" /> to connectionProperties in the jee-container.xml file, the issue was resolved.

Environment

Operating system and version: MacOS Sonama 14.6.1 (23G93
Java version: java version "21.0.2" 2024-01-16 LTS
Ant Media Server version: Community Edition 2.11.0
Browser name and version: Mozilla Firefox

Steps to reproduce

Start with ./start.sh
Open the Ant Media Server dashboard at localhost:5080 using the Mozilla Firefox browser.

Expected Behavior

I expect to be able to access the Ant Media Server Dashboard.

Actual Behavior

I couldn't access the Ant Media Server Dashboard.

Workaround Solution

If I try using an incognito window, the issue is resolved.

Logs

Request Header (8.389 kb) details

GET / HTTP/1.1
Host: localhost:5080
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:129.0) Gecko/20100101 Firefox/129.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/png,image/svg+xml,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br, zstd
Connection: keep-alive
Cookie: sb-pzutazfybbuehbvkdlwk-auth-token-code-verifier=%22b59f450e4838ea9f0afb7f366bbac2d643cacaca9c52c29e88c1ac0ad01161cf873f828a82571f2c68b147471c7fd5357e2d589b13b0593f%22; sb-pzutazfybbuehbvkdlwk-auth-token=%5B%22eyJhbGciOiJIUzI1NiIsImtpZCI6ImYxT0xaRHlLNnJRd3J2bmYiLCJ0eXAiOiJKV1QifQ.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.b0IrljfpJavdHmq44WpGpL04hJiVMPIXtea5GF64DUY%22%2C%22ofmpHGuOnb1Y-oBxui6kQA%22%2Cnull%2Cnull%2Cnull%5D; __stripe_mid=d9f17e8d-949c-489d-b09a-d8192a8f5782d2afce; sb-qrpzfmhvckvqmxbwfyrt-auth-token=base64-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; _gcl_au=1.1.797622913.1721051871; _ga_7SK9WEGYNK=GS1.1.1722017799.11.1.1722019333.60.0.0; _ga=GA1.1.809598856.1721051873; calltrk_referrer=direct; calltrk_landing=http%3A//localhost%3A3000/thank-you%3Fage%3D55%26zipCode%3D33305; calltrk_session_id=cdaba9f3-4287-4299-a1bc-f443755293ac; _uetvid=7f5f33a0430a11ef8062a72e5e954264; ajs_anonymous_id=de03d7c6-d9b5-4166-a1d1-e4e3702294e1; _ga_180NL12WP6=GS1.1.1724283481.4.0.1724283481.0.0.0; sb-efmreilsowpsadgzgyeg-auth-token-code-verifier=base64-Ijc5MTUyN2Q4NTNjOGMzMjUyMjRkOWVlYzRiYTE1YjQ1ZDlhYmE5MWZhMTMyOGZjMTYzODYxYjAzNDQwY2QxYmVlNGNkYmQzODgzODg4NmI2NTZjODNjOGQ1NjIwOTUwMDEyZmRlYTkzMmU2ZmQzYjUi; sb-efmreilsowpsadgzgyeg-auth-token=base64-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; JSESSIONID=C7AAC05AE5F0469523CCBFCD76921D83
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

HTTP Status 400 – Bad Request

Type Exception Report

Message Request header is too large

Description The server cannot or will not process the request due to something that is perceived to be a client error (e.g., malformed request syntax, invalid request message framing, or deceptive request routing).

Exception

java.lang.IllegalArgumentException: Request header is too large
    org.apache.coyote.http11.Http11InputBuffer.fill(Http11InputBuffer.java:774)
    org.apache.coyote.http11.Http11InputBuffer.parseHeader(Http11InputBuffer.java:968)
    org.apache.coyote.http11.Http11InputBuffer.parseHeaders(Http11InputBuffer.java:593)
    org.apache.coyote.http11.Http11Processor.service(Http11Processor.java:285)
    org.apache.coyote.AbstractProcessorLight.process(AbstractProcessorLight.java:63)
    org.apache.coyote.AbstractProtocol$ConnectionHandler.process(AbstractProtocol.java:904)
    org.apache.tomcat.util.net.Nio2Endpoint$SocketProcessor.doRun(Nio2Endpoint.java:1685)
    org.apache.tomcat.util.net.SocketProcessorBase.run(SocketProcessorBase.java:52)
    org.apache.tomcat.util.net.AbstractEndpoint.processSocket(AbstractEndpoint.java:1266)
    org.apache.tomcat.util.net.Nio2Endpoint.setSocketOptions(Nio2Endpoint.java:330)
    org.apache.tomcat.util.net.Nio2Endpoint$Nio2Acceptor.completed(Nio2Endpoint.java:470)
    org.apache.tomcat.util.net.Nio2Endpoint$Nio2Acceptor.completed(Nio2Endpoint.java:406)
    java.base/sun.nio.ch.Invoker.invokeUnchecked(Invoker.java:129)
    java.base/sun.nio.ch.Invoker$2.run(Invoker.java:221)
    java.base/sun.nio.ch.AsynchronousChannelGroupImpl$1.run(AsynchronousChannelGroupImpl.java:113)
    org.apache.tomcat.util.threads.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1190)
    org.apache.tomcat.util.threads.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:659)
    org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run(TaskThread.java:63)
    java.base/java.lang.Thread.run(Thread.java:1583)

ant-media / Ant-Media-Server