thomseddon/traefik-forward-auth

Invalid Cookie should point to a recoverable state

Davst opened this issue · 0 comments

Davst commented

So, I know this mainly is a rest product of me having an old cookie left from traefik 1 oauth but as users really can get themselves into odd unexpected situations I believe there should be better error handling for the "Invalid cookie mac" state.

I found myself in a situation after upgrading my server where all my normal browsers just returned Not authenticated whatever I did. The logs showed me this was due to an invalid cookie and thus i had to clear site cookies to recover.

However for many users that aren't that tech savvy this is essentially an unrecoverable state, where simply throwing up a oauth login page would allow them to recover from it. IF not that, at least clearing that cookie or logging them out or such would be resonable as well.

My suggestion is to improve the handling for this or at least provide options for redirection to a recoverable state.