oathkeeper
oathkeeper copied to clipboard
Support gzipped responses in check session URLs
Describe the bug
See https://github.com/ory/oathkeeper/pull/835
If a request manually sets the Accept-Encoding
header the transport will not automatically decode the response.
https://pkg.go.dev/net/http#Transport.DisableCompression
Currently, it looks like oathkeeper copies all the headers from the original request so if the original request has the Accept-Encoding
header the body will not decompressed.
https://github.com/ory/oathkeeper/blob/9375f92b5d647c8417389158bf66e060b4ab8ad6/pipeline/authn/authenticator_cookie_session.go#L152
Ah, I see, that makes sense!
@aeneasr PR coming soon. We somehow hit that.