Problem with cookie size because of refresh_token

[dmaragkos]

Hi,

I am having an issue because the OKDP_AUTH_SPARK_UI cookie size is exceeding the 4KB limit. The issue is caused by the refresh_token which is too long. Is there a way to overcome the issue, e.g. configuration parameter to ignore refresh_token?

Thank you in advance

[idirze]

Hello,
Thank you for the issue and we apologize for the delay.

Have you tried omitting offline_access from the scope or AUTH_SCOPE depending on your configuration?

Instead of providing the scope openid+profile+email+roles+offline_access, you can provide openid+profile+email+roles for example by omitting offline_access and check if your OAuth2 or OIDC provider returns the refresh token.

Note

We store the token information in a cookie (encrypted + compressed) as spark history (or ui) does not support natively http session management and conceptually we wanted to keep the plugin as simpler as possible without extra reverse proxy for session management.

Let us know so that we can provide a patch.