search

zalando / skipper

An HTTP router and reverse proxy for service composition, including use cases like Kubernetes Ingress
https://opensource.zalando.com/skipper/
Other
3.07k stars 347 forks source link

Cookie too large issue still exists #1977

Open abinet opened 2 years ago

abinet commented 2 years ago

Hi all, I am aware about https://github.com/zalando/skipper/issues/1089

For some users with big number of user groups we get cookie size 8454 (compressed already) And even with the cookie chunked into 3 parts we get "cookie too large" response.

I am wondering does the chunking help to avoid the issue really?

szuecs commented 2 years ago

@abinet it helped in the past, but maybe browser changed the max cookie size. https://github.com/zalando/skipper/blob/master/filters/auth/oidc.go#L40 is max size and https://github.com/zalando/skipper/blob/master/filters/auth/oidc.go#L404-L421 splits it into max 26 chunks.

Which part is telling about "cookie too large"? The browser or something else? The split will only affect the browser.