ubccr / mokey

FreeIPA self-service account management portal
BSD 3-Clause "New" or "Revised" License
191 stars 46 forks source link

Bug: Request Header Fields Too Large #122

Open Aterfax opened 1 year ago

Aterfax commented 1 year ago

Feb 25 12:53:28 sub.domain.com mokey[59818]: time="2023-02-25T12:53:28Z" level=error msg="Request Header Fields Too Large" code=431 ip=X.X.X.X path=/ username="<nil>"

Seems that Mokey (mokey-0.6.3-amd64.rpm) is unable to handle large header fields when doing user verification for new accounts. Not sure exactly how large they have to be to trigger this error (it's blocking verification of new accounts).

I expect this is caused by reverse proxying through Authentik, but in principle large headers should not necessarily cause a problem. This may need a larger limit or a user configurable limit.