Fix cookie split should account for cookie name

This commit is contained in:
Joel Speed 2018-06-20 14:56:13 +01:00
parent d4b588dbe9
commit 714e2bdfba
No known key found for this signature in database
GPG Key ID: 6E80578D6751DEFB

View File

@ -291,7 +291,7 @@ func (p *OAuthProxy) MakeSessionCookie(req *http.Request, value string, expirati
value = cookie.SignedValue(p.CookieSeed, p.CookieName, value, now)
}
c := p.makeCookie(req, p.CookieName, value, expiration, now)
if len(c.Value) > 4096 {
if len(c.Value) > 4096-len(p.CookieName) {
return splitCookie(c)
}
return []*http.Cookie{c}