fix(oidc): Avoid storing Pac4j profile in cookie (datahub-project#6260)

CybercentreCanada · Nov 18, 2022 · 70e4bbe · 70e4bbe
1 parent 5bc4a4c
commit 70e4bbe
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 1 deletion.
diff --git a/datahub-frontend/app/controllers/SsoCallbackController.java b/datahub-frontend/app/controllers/SsoCallbackController.java
@@ -40,6 +40,7 @@ public SsoCallbackController(
       @Nonnull AuthServiceClient authClient) {
     _ssoManager = ssoManager;
     setDefaultUrl("/"); // By default, redirects to Home Page on log in.
+    setSaveInSession(false);
     setCallbackLogic(new SsoCallbackLogic(ssoManager, systemAuthentication, entityClient, authClient));
   }
 

diff --git a/datahub-frontend/run/frontend.env b/datahub-frontend/run/frontend.env
@@ -50,4 +50,4 @@ METADATA_SERVICE_AUTH_ENABLED=true
 DATAHUB_AKKA_MAX_HEADER_COUNT=64
 
 # Change to override max header value length defaults
-DATAHUB_AKKA_MAX_HEADER_VALUE_LENGTH=8k
+DATAHUB_AKKA_MAX_HEADER_VALUE_LENGTH=8k