Authentication

Sign in fails with a 500 error code frontend logs while using OpenID connect provider

*8317 upstream sent too big header while reading response header from upstream, client: 10.170.157.186, server: localhost, request: "GET /oauth/callback

SOLUTION

This occurs when using an OpenID connect. If the callback request includes HTTP headers which are larger than the allowed limit, the Tower web server reports the error shown above.

The solution involves rebuilding the frontend container, adding the following proxy directives in the /etc/nginx/nginx.conf file:

        proxy_buffer_size          128k;
        proxy_buffers              4 256k;
        proxy_busy_buffers_size    256k;