Large cookie

[kramerrs]

I am using Shiny for Python in a ShinyProxy framework. Once the user is authenticated it tries to form the web socket connection with Shiny for Python. I have a number of different users that are successfully able to connect to either R/Shiny or Shiny for Python. This user however is unable to do so though he is able to connect with R/Shiny apps. The biggest difference appears to be that this user has a very large number of SAML roles to the tune of 22,152 characters.

Are there some character limits in the headers? I perused the shiny for python github code, and there are some content-length code, however I was unable to discern if this was relevant. I know in R/Shiny many of the libraries have issues with content length. In this situation filter/modifying the cookie isn't very feasible, since I have already cleaned up the headers with the edge router. It's really between ShinyProxy and Shiny for Python that there is an issue.

[thien-bui-coherent]

Hello, I encounter a similar issue as well with ShinyProxy 3.1.x. With simple authentication, everything works. With LDAP authentication, only Shiny for R works, Shiny for Python does not. I thought it is an issue with Python, but to my surprise, Python with Dash works. So I suspected there is a problem with the built-in web server for Shiny for Python, i.e. Uvicorn. It turns out I have some special characters in my SAML that Uvicorn has problem with. Dash/Flask for Python uses Werkzeug web server and can handle special characters.
My work around is telling ShinyProxy not to send HTTP headers to the Docker container. For each Shiny for Python app spec, I add:
add-default-http-headerss: false
That will stop ShinyProxy from sending $HTTP_X_SP_USERGROUPS and $HTTP_X_SP_USERID, and some other $HTTP_X_*, to the web server of the docker container. If you still need these two values, you can get them from the environment variables SHINYPROXY_USERGROUPS and SHINYPROXY_USERNAME.

[kramerrs]

Ah could be special characters. Put a nginx reverse proxy in it cleaned it right up.