这是indexloc提供的服务,不要输入任何密码
Skip to content

Rails 7.1.3.3 | CookieOverflow Issue with Access Token #200

@RailsCod3rFuture

Description

@RailsCod3rFuture

Checklist

  • The issue can be reproduced in the Rails sample app (or N/A).
  • I have looked into the Readme and the Examples, and have not found a suitable solution or answer.
  • I have looked into the API documentation and have not found a suitable solution or answer.
  • I have searched the issues and have not found a suitable solution or answer.
  • I have searched the Auth0 Community forums and have not found a suitable solution or answer.
  • I agree to the terms within the Auth0 Code of Conduct.

Description

Greetings, we recently upgraded to rails 7.1.3 and we're having an issue where the access token is too large for rails session object. The access token is 1344 bytes and it leads the cookie size to being 4336. Not sure if anyone else receives the problem after upgrading to the newer rails versions. We have a rails 6.0.4.1 application that does not render the cookie overflow exception upon redirect back to the target application. I even tried to use Rack Deflater to get the size of incoming resources down, but that does not work.

Reproduction

  1. Setup a basic auth0 application
  2. Add 3 claims
  3. Add a handful of custom claim meta attributes

the rails session cookie is _app_rails_session=1332 and the access_token is 1344

Additional context

No response

omniauth-auth0 version

3.1.1

OmniAuth version

2.1.2

Ruby version

3.2.4

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions