Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Rails 7.1.3.3 | CookieOverflow Issue with Access Token #200

Open
6 tasks done
RailsCod3rFuture opened this issue Nov 16, 2024 · 0 comments
Open
6 tasks done

Rails 7.1.3.3 | CookieOverflow Issue with Access Token #200

RailsCod3rFuture opened this issue Nov 16, 2024 · 0 comments
Labels

Comments

@RailsCod3rFuture
Copy link

Checklist

  • The issue can be reproduced in the Rails sample app (or N/A).
  • I have looked into the Readme and the Examples, and have not found a suitable solution or answer.
  • I have looked into the API documentation and have not found a suitable solution or answer.
  • I have searched the issues and have not found a suitable solution or answer.
  • I have searched the Auth0 Community forums and have not found a suitable solution or answer.
  • I agree to the terms within the Auth0 Code of Conduct.

Description

Greetings, we recently upgraded to rails 7.1.3 and we're having an issue where the access token is too large for rails session object. The access token is 1344 bytes and it leads the cookie size to being 4336. Not sure if anyone else receives the problem after upgrading to the newer rails versions. We have a rails 6.0.4.1 application that does not render the cookie overflow exception upon redirect back to the target application. I even tried to use Rack Deflater to get the size of incoming resources down, but that does not work.

Reproduction

  1. Setup a basic auth0 application
  2. Add 3 claims
  3. Add a handful of custom claim meta attributes

the rails session cookie is _app_rails_session=1332 and the access_token is 1344

Additional context

No response

omniauth-auth0 version

3.1.1

OmniAuth version

2.1.2

Ruby version

3.2.4

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

1 participant