Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Support for splitting OIDC session cookie into chunks #37836

Closed
sberyozkin opened this issue Dec 19, 2023 · 1 comment · Fixed by #37891
Closed

Support for splitting OIDC session cookie into chunks #37836

sberyozkin opened this issue Dec 19, 2023 · 1 comment · Fixed by #37891
Labels
area/oidc kind/enhancement New feature or request
Milestone

Comments

@sberyozkin
Copy link
Member

Description

This enhancement request is related to https://stackoverflow.com/questions/77660268/quarkus-oidc-session-cookie-limit and is about addressing the same problem that #37785 tries to address, but in a more general way.

The problem is that when ID token is really large, then, even if we configure OIDC not to store all the tokens in the session cookie and instead have one cookie for ID token, and 2 more cookies for access and refresh tokens, the encrypted session cookie containing ID token only will still be larger than 4K. So when it happens, as mentioned in #37785, a warning is logged and users have to choose other options like store tokens in DB (Quarkus provides an extension to support it), or disable the encryption.

However one more option is available, mentioned in the 1st comment at https://stackoverflow.com/questions/77660268/quarkus-oidc-session-cookie-limit, split the session cookie into chunks.

Implementation ideas

Split the session cookie into chunks, for example, q_session_1, q_session_2, etc.

@sberyozkin sberyozkin added the kind/enhancement New feature or request label Dec 19, 2023
Copy link

quarkus-bot bot commented Dec 19, 2023

/cc @pedroigor (oidc)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
area/oidc kind/enhancement New feature or request
Projects
None yet
Development

Successfully merging a pull request may close this issue.

1 participant