Cookie Management Fix - Summary
Problem Solved
Issue: User stuck on "Verifying authorization..." screen, requiring manual cookie deletion to access the app.
Root Cause:
- Oversized session cookies (>4096 bytes) due to large OIDC profile data
- Infinite authorization loop when session becomes corrupted
- No automatic recovery mechanism
Testing Steps
-
Clear existing state:
// Browser console
localStorage.clear();
sessionStorage.clear();
document.cookie.split(";").forEach((c) => {
document.cookie = c.replace(/^ +/, "").replace(/=.*/, "=;expires=" + new Date().toUTCString() + ";path=/");
}); -
Restart services:
cd ui
rm -rf .next
npm run dev -
Test authentication flow:
- Navigate to
http://localhost:3000 - Complete SSO login
- Should redirect back to home in 2-3 seconds
- No more stuck authorization screen!
- Navigate to
-
Test reset button (if needed):
- If stuck (shouldn't happen), wait 5 seconds
- Click "Clear Session & Retry"
- Should redirect to login
-
Test auto-reset (if needed):
- If stuck for 15 seconds
- Auto-reset triggers
- Redirects automatically
Expected Behavior
Before Fix
❌ Stuck on "Verifying authorization..." forever
❌ Must manually delete cookies via browser settings
❌ Confusing user experience
❌ No recovery mechanism
After Fix
✅ Automatic cookie size detection
✅ Progressive recovery options (5s button, 15s auto)
✅ Clear user feedback
✅ Session never gets stuck
✅ No manual intervention needed
Related
- Architecture: architecture.md