Benjamin Foote

@bduffany thanks for confirming, PR welcome Configuring the size of the session cookie beyond default 4096 sounds like it's worth trying

After further consideration, I don't think has true utility. If someone wants and care to further this discussion, please do chime in.

I'm not sure I'm following this correctly. Could you please clarify the scope of the variables with a more complete example, possibly in a gist? Which nginx version are you...

line [223](https://gist.github.com/Smith-Chris1/80e11a760ee2c2a6bda7105364fa4369#file-gistfile1-txt-L223) shows `localhost` and but your VP config shows a much longer domain. Those must be aligned. The warning in the logs for `/authenticate/auth` such as `"/auth Invalid session...

Something must be wrong with the authorization cookie. Do you see the cookie getting set in the /login response? It should include a session code. That cookie and code is...

@Smith-Chris1 are you still working this issue? If not could you please close it? If you do still want help please do provide current configs and logs.

What have you tried? Are you able to 'curl' the user info URL?

> going through a proxy server that's documented in the README

yep, looks like a bug! Thanks much

`v0.40.0` upgraded golang to `1.22`