MrSwitch/hello.js

HTTP Error 400. The size of the request headers is too long. - Azure B2C

Open

#525 opened on Nov 27, 2017

View on GitHub
 (4 comments) (0 reactions) (0 assignees)JavaScript (4,630 stars) (557 forks)batch import
good first issuehelp wanted

Description

Hi,

some users are experiencing this error when using Chrome. Hellojs is working with AzureB2C and it works ok.

HTTP Error 400. The size of the request headers is too long.

This is the exception when trying to execute hello.login() which happens in chrome in some cases.

It works when we switch to incognito or use other browser.

Is this something related to the session or theres some other issue? I've tried removing cookies, clearing local storage.

Contributor guide

Tech stack
javascriptazure
Domain
authentication
Issue type
bug
DifficultyEstimated implementation difficulty for a new contributor, from 1 for very small changes to 5 for expert-level work.
3
Estimated timeA rough time range for an experienced contributor to investigate, implement, test, and prepare a pull request.
half day
Activity statusHow available the issue appears right now: fresh, active, stale, blocked, or waiting on maintainer input.
stale
ClarityHow clearly the issue explains the expected change, acceptance criteria, and next step.
needs investigation
Prerequisites
JavaScriptOAuth2HTTP request handling
Newbie friendlinessA 1-100 score estimating how approachable this issue is for first-time contributors.
35
Research direction
Investigate why Chrome sends overly large request headers during hello.login() with Azure B2C. Compare headers in normal vs incognito mode. Check if cookies or local storage data is being appended to request headers. Look at hello.js source code (src/) for how OAuth2 redirects and token exchanges are constructed. Reproduce with a simple test case focusing on Azure B2C endpoints.