Lightweight-Access-Token on IDaaS Bookhttps://idaas.xlabs.club/tags/lightweight-access-token/Recent content in Lightweight-Access-Token on IDaaS BookHugozh-CNCopyright (c) 2020-2024 xlabs.clubWed, 30 Sep 2026 23:11:18 +0800IAM Token 体积治理：Keycloak claims 裁剪与 oauth2-proxy Cookie 膨胀https://idaas.xlabs.club/blog/keycloak-token-size-oauth2-proxy-cookies/Wed, 23 Sep 2026 00:00:00 +0800https://idaas.xlabs.club/blog/keycloak-token-size-oauth2-proxy-cookies/用户组一多就出现 431、日志开始警告 Multiple cookies are required——问题不在浏览器，而在网关里那条 token → Cookie → 请求头的放大器。给出 Keycloak 侧四层裁剪、oauth2-proxy 侧 4000 字节内部上限的真实机制、量化诊断命令与分层回滚。