Skip to content

fix(auth): trim userinfo stored in session cookies - #1056

Merged
yaozheng-fang merged 1 commit into
volcengine:mainfrom
liujunlinginternet-glitch:fix/oauth2-userinfo-cookie-size
Sep 4, 2026
Merged

fix(auth): trim userinfo stored in session cookies#1056
yaozheng-fang merged 1 commit into
volcengine:mainfrom
liujunlinginternet-glitch:fix/oauth2-userinfo-cookie-size

Conversation

@liujunlinginternet-glitch

@liujunlinginternet-glitch liujunlinginternet-glitch commented Sep 4, 2026

Copy link
Copy Markdown
Contributor

Summary

  • Filter OAuth2 userinfo before it is stored in the browser session cookie.
  • Retain standard OIDC display fields and the configured user ID field.
  • Prevent nested provider claims from exceeding browser cookie limits.

Testing

  • uv run pytest tests/auth/test_oauth2_auth.py
  • uv run pre-commit run --files veadk/auth/middleware/oauth2_auth.py tests/auth/test_oauth2_auth.py

@yaozheng-fang
yaozheng-fang merged commit ec94ff8 into volcengine:main Sep 4, 2026
10 checks passed
PolarisCzh pushed a commit to PolarisCzh/veadk-python that referenced this pull request Sep 23, 2026
@liujunlinginternet-glitch @liujunling0
fix(auth): trim userinfo stored in session cookies (volcengine#1056)
ca85dec 
Co-authored-by: liujunling.0 <liujunling.0@bytedance.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@warm-wm warm-wm warm-wm approved these changes

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

4 participants

@liujunlinginternet-glitch @warm-wm @yaozheng-fang @liujunling0