[ 
https://issues.apache.org/jira/browse/KNOX-3350?focusedWorklogId=1025238&page=com.atlassian.jira.plugin.system.issuetabpanels:worklog-tabpanel#worklog-1025238
 ]

ASF GitHub Bot logged work on KNOX-3350:
----------------------------------------

                Author: ASF GitHub Bot
            Created on: 15/Jun/26 14:52
            Start Date: 15/Jun/26 14:52
    Worklog Time Spent: 10m 
      Work Description: smolnar82 commented on PR #1264:
URL: https://github.com/apache/knox/pull/1264#issuecomment-4709188569

   @lmccay made a point: cookie size can be an issue.
   
   Modern browsers support cookies up to 4K:
   <img width="833" height="647" alt="image" 
src="https://github.com/user-attachments/assets/2758fdb6-acf4-4228-8a4d-1c91160b075f";
 />
   Which opens the following question: shall we include groups only, and only 
if, when the cummulated cookie size doesn't exceed 4K?




Issue Time Tracking
-------------------

    Worklog Id:     (was: 1025238)
    Time Spent: 1h 20m  (was: 1h 10m)

> Allow group membership information to be included in issued KNOXSSO cookie
> --------------------------------------------------------------------------
>
>                 Key: KNOX-3350
>                 URL: https://issues.apache.org/jira/browse/KNOX-3350
>             Project: Apache Knox
>          Issue Type: Improvement
>          Components: KnoxSSO
>    Affects Versions: 2.0.0, 2.1.0
>            Reporter: Sandor Molnar
>            Priority: Major
>             Fix For: 3.0.0
>
>          Time Spent: 1h 20m
>  Remaining Estimate: 0h
>
> KNOX-2731 added the ability to include group information (if available), in 
> the generated JWTs by the {{KNOXTOKEN}} service.
> It'd be beneficial to decorate the `hadoop-jwt` SSO cookie with groups as 
> well (in case if's configured).



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

Reply via email to