Yes, we are using long headers to send authorization back and forth between clients and servers.
The client sends long "Authorization: ..." headers to the server (is there a limit here?) and the server sends "X-Access-Token-Issued: ..:" headers to the client (which will be limited, of course). I am fairly certain you are not willing to make an exception to our custom X-header, but I would like to know why all headers are limited so severly (<500 characters)? best regards, Martin On Sunday, November 2, 2008 8:25:19 AM UTC+1, Jon McAlister wrote: > > Hi Will, good news is that we've fixed the bug in the mainline and the > fix will soon be deployed to production. We will be increasing the > length limit of the Location header, which will fix your issue. The > length limit on the other response headers will remain, however. Do > let us know if this is problematic or if there are specific headers > which need larger values. > > Jon > > On Oct 30, 12:54 am, Will Norris <[email protected]> wrote: > > I recently downloaded the source code for the example openid-consumer > > application[0]. In trying to get it working, I noticed that the > > "Location" header was often not being sent in the response when > > running the app on AppEngine, although it was fine running on > > localhost. > > > > Further investigation revealed that all headers are being removed from > > the HTTP response if the total length of the header (name, colon, > > space, and value) exceeds 498 characters. Like I said, this is only > > happening on the production AppEngine, not when running from > > localhost. Any thoughts on why this is and how to get around it? > > Google proxy servers dropping headers or something? This is probably > > not a problem for most applications, but certainly can be when you > > have long redirect URLs like in OpenID. > > > > [0]:http://openid-consumer.appspot.com/ > > > > Thanks, > > Will -- You received this message because you are subscribed to the Google Groups "Google App Engine" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. Visit this group at http://groups.google.com/group/google-appengine. For more options, visit https://groups.google.com/groups/opt_out.
