ging / fiware-idm

OAuth 2.0-based authentication of users and devices, user profile management, Single Sign-On (SSO) and Identity Federation across multiple administration domains.
https://keyrock-fiware.github.io
MIT License
36 stars 81 forks source link

Adding parameter to configure max HTTP header size #287

Closed dwendland closed 2 years ago

dwendland commented 2 years ago

Proposed changes

During authorization, clients might send requests with very large JWTs, e.g., in case that these contain a full certificate chain in the x5c header. Per default, the node express webserver only accepts headers up to 8KB. This change allows to set a different (higher) value via an ENV. If not specified, it uses the default value of 8192 bytes.

Types of changes

What types of changes does your code introduce to the project: Put an x in the boxes that apply

Checklist

Put an x in the boxes that apply. You can also fill these out after creating the PR. If you're unsure about any of them, don't hesitate to ask. We're here to help! This is simply a reminder of what we are going to look for before merging your code.

Further comments

Since this needs to be provided as parameter to the node start command, this is only configurable via an ENV.

github-actions[bot] commented 2 years ago

CLA Assistant Lite bot All contributors have signed the CLA ✍️