Forward Auth (Authentik) "maxResponseBodySize" force a default value

[blackneil]

What problem does this solve?

2026-09-05T13:53:28Z WRN maxResponseBodySize is not configured, allowing unlimited response body size which can lead to DoS attacks and memory exhaustion. Please set an appropriate limit. entryPointName=websecure middlewareName=Authentik@file middlewareType=ForwardAuth routerName=xxx@file

Proposed solution

Save the basic proposal "4096", if not defined.

Alternatives you've considered

No response

Which area does this relate to?

Middlewares

Additional context

No response

[chr0nzz]

Good idea. The forward auth wizards now fill it with 4096, so new middlewares stop triggering that warning.

For ones you already have, the middleware card shows a warning icon when there is no limit set. Click it and the editor opens with the line added, so you can check it and save.

4096 is plenty for Authentik since the response is just headers and a redirect, but you can raise it if you ever see auth fail on a bigger response.

Fixed and scheduled for the next release.

[blackneil]

Thanks ! 👍