From bc8b7d059b9b73e43743f77a5235bb94b5427391 Mon Sep 17 00:00:00 2001 From: Joel Speed Date: Wed, 20 Jun 2018 14:56:13 +0100 Subject: [PATCH] Fix cookie split should account for cookie name --- oauthproxy.go | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/oauthproxy.go b/oauthproxy.go index 34d8495..f471785 100644 --- a/oauthproxy.go +++ b/oauthproxy.go @@ -265,7 +265,7 @@ func (p *OAuthProxy) MakeSessionCookie(req *http.Request, value string, expirati value = cookie.SignedValue(p.CookieSeed, p.CookieName, value, now) } c := p.makeCookie(req, p.CookieName, value, expiration, now) - if len(c.Value) > 4096 { + if len(c.Value) > 4096-len(p.CookieName) { return splitCookie(c) } return []*http.Cookie{c}