outposts/proxy: don't save raw jwt in cookie to prevent securecookie: the value is too long
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
This commit is contained in:
		| @ -13,6 +13,4 @@ type Claims struct { | ||||
| 	Name              string      `json:"name"` | ||||
| 	PreferredUsername string      `json:"preferred_username"` | ||||
| 	Groups            []string    `json:"groups"` | ||||
|  | ||||
| 	RawToken string | ||||
| } | ||||
|  | ||||
| @ -25,7 +25,6 @@ func (a *Application) addHeaders(headers http.Header, c *Claims) { | ||||
| 	headers.Set("X-authentik-email", c.Email) | ||||
| 	headers.Set("X-authentik-name", c.Name) | ||||
| 	headers.Set("X-authentik-uid", c.Sub) | ||||
| 	headers.Set("X-authentik-jwt", c.RawToken) | ||||
|  | ||||
| 	// System headers | ||||
| 	headers.Set("X-authentik-meta-jwks", a.proxyConfig.OidcConfiguration.JwksUri) | ||||
|  | ||||
| @ -45,6 +45,5 @@ func (a *Application) redeemCallback(r *http.Request, shouldState string) (*Clai | ||||
| 	if err := idToken.Claims(&claims); err != nil { | ||||
| 		return nil, err | ||||
| 	} | ||||
| 	claims.RawToken = rawIDToken | ||||
| 	return claims, nil | ||||
| } | ||||
|  | ||||
		Reference in New Issue
	
	Block a user
	 Jens Langhammer
					Jens Langhammer