dfca2de8-200c-4fbb-b74c-74a8a8ee1296

can you provide a screenshot of this error?

yes

https://beta.joylink.io/api

can reproduce with the URL i sent above as well if it helps

i think you can only reproduce if logged into joylink.io actually since that's what sets the cookie

iirc the header limit is 8KB, i can't see us increasing that anymore unfortunately

any way to make it just reject headers over the limit

we do not provide that kind of functionality

Hi, the solution to this is (unfortunately) better token design. You should only be storing core information in the JWT token anyways, such as a unique identifier for the user and the barebones information that is required to make the site work. For example, if you're storing the entire user object in the JWT and only accessing the SUB (uid) for authentication (assuming your payload is signed), you should really only be storing the SUB on that token.

Unfortunately the cookie size is very large due to JWTs and we're getting Request Header Fields Too Large. The backend doesn't even need to use this cookie, and there's no way to omit it from NextJS's end without creating and paying for custom middleware.

I can't read

Can you tell me which cookie it is?

Oh well, I can't even sign into it because "API Key required" or something

oh well

Pretty cool product tho btw