"invalid cookie, longer than max length 4093" #2165
Labels
bug
Something isn't working
security
Security related
workaround
There's a workaround, might not be great, but exists
Describe the bug
The current size limit of the JWT token is 4093, which is prohibitive for orgs using SSO with large group memberships.
This seems to have been brought up in #1103 and was then closed with the fix being to display a warning. This doesn't really help those of us with large orgs trying to configure SSO that need to use dex
To Reproduce
Configure dex with an SSO provider with a large number of groups returned
Attempt to login
Expected behavior
User can login
Version
v1.1.2
The text was updated successfully, but these errors were encountered: