@@ -424,7 +424,11 @@ server {
424424 auth_request_set $auth_cookie $upstream_http_set_cookie;
425425 add_header Set-Cookie $auth_cookie;
426426
427− # if you enabled --set-authorization and your cookies are split into multiple parts,
427+ # When using the --set-authorization flag, some provider's cookies can exceed the 4kb
428+ # limit and so the OAuth2 Proxy splits these into multiple parts.
429+ # Nginx normally only copies the first `Set-Cookie` header from the auth_request to the response,
430+ # so if your cookies are larger than 4kb, you will need to extract additional cookies manually.
431+ auth_request_set $auth_cookie_name_upstream_1 $upstream_cookie_auth_cookie_name_1;
428432 # you also need to extract the additional cookies, because $upstream_http_set_cookie
429433 # only contains the first Set-Cookie header from the auth_request.
430434 auth_request_set $auth_cookie_name_upstream_1 $upstream_cookie_auth_cookie_name_1;