istio-ecosystem / authservice

Move OIDC token acquisition out of your app code and into the Istio mesh
Apache License 2.0
217 stars 63 forks source link

Authservice should handle cookies that contain '=' characters #90

Closed tylerschultz closed 4 years ago

tylerschultz commented 4 years ago

The authservice session id cookie value should never contain '=' characters, but other cookies may be present that do contain '='. The authservice does not handle the scenario where a cookie contains an equal sign, causing the authservice to fail to retrieve the token from the IdP.