Andrea Aime ( https://osgeo-org.atlassian.net/secure/ViewProfile.jspa?accountId=557058%3Ae9469ffc-5e16-4c2b-b7b0-b9c46e912f9e ) *created* an issue
GeoServer ( https://osgeo-org.atlassian.net/browse/GEOS?atlOrigin=eyJpIjoiNzFhMTExNWE5ZjhjNDQzMDgwZGQ3NDM5NzdhNWNlMTAiLCJwIjoiaiJ9 ) / Bug ( https://osgeo-org.atlassian.net/browse/GEOS-9896?atlOrigin=eyJpIjoiNzFhMTExNWE5ZjhjNDQzMDgwZGQ3NDM5NzdhNWNlMTAiLCJwIjoiaiJ9 ) GEOS-9896 ( https://osgeo-org.atlassian.net/browse/GEOS-9896?atlOrigin=eyJpIjoiNzFhMTExNWE5ZjhjNDQzMDgwZGQ3NDM5NzdhNWNlMTAiLCJwIjoiaiJ9 ) OpenId connect authorization fails when the authentication token is too large ( https://osgeo-org.atlassian.net/browse/GEOS-9896?atlOrigin=eyJpIjoiNzFhMTExNWE5ZjhjNDQzMDgwZGQ3NDM5NzdhNWNlMTAiLCJwIjoiaiJ9 ) Issue Type: Bug Assignee: Unassigned Components: Community modules Created: 10/Feb/21 12:56 PM Priority: Medium Reporter: Andrea Aime ( https://osgeo-org.atlassian.net/secure/ViewProfile.jspa?accountId=557058%3Ae9469ffc-5e16-4c2b-b7b0-b9c46e912f9e ) Currently the token is added as a query parameter in the callback to "userinfo", but that can cause the URL to become too long. The standard recommends to use a HTTP header instead, which while having size restrictions also, has at least significantly larger ones compared to the URL length. ( https://osgeo-org.atlassian.net/browse/GEOS-9896#add-comment?atlOrigin=eyJpIjoiNzFhMTExNWE5ZjhjNDQzMDgwZGQ3NDM5NzdhNWNlMTAiLCJwIjoiaiJ9 ) Add Comment ( https://osgeo-org.atlassian.net/browse/GEOS-9896#add-comment?atlOrigin=eyJpIjoiNzFhMTExNWE5ZjhjNDQzMDgwZGQ3NDM5NzdhNWNlMTAiLCJwIjoiaiJ9 ) Get Jira notifications on your phone! Download the Jira Cloud app for Android ( https://play.google.com/store/apps/details?id=com.atlassian.android.jira.core&referrer=utm_source%3DNotificationLink%26utm_medium%3DEmail ) or iOS ( https://itunes.apple.com/app/apple-store/id1006972087?pt=696495&ct=EmailNotificationLink&mt=8 ) This message was sent by Atlassian Jira (v1001.0.0-SNAPSHOT#100154- sha1:7cdb571 )
_______________________________________________ Geoserver-devel mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/geoserver-devel
