431 Request Header Fields Too Large

[lfire]

Describe the bug

To Reproduce

Expected behavior

Screenshots

Configuration File (cat ~/.config/verdaccio/config.yaml)

#
# This is the default config file. It allows all users to do anything,
# so don't use it on production systems.
#
# Look here for more config file examples:
# https://github.com/verdaccio/verdaccio/tree/master/conf
#

listen: 0.0.0.0:4873

# path to a directory with all packages
storage: ./storage
# path to a directory with plugins to include
plugins: ./plugins

web:
  # WebUI is enabled as default, if you want disable it, just uncomment this line
  enable: true
  title: npm
  # logo: /mnt/software/verdaccio/logo40.svg
  primary_color: "#0893DC"
  gravatar: true
  sort_packages: asc

auth:
  gitlab:
    url: http://192.168.44.10:8088
    #htpasswd:
    #file: ./htpasswd
    # Maximum amount of users allowed to register, defaults to "+inf".
    # You can set this to -1 to disable registration.
    #max_users: 1000

# a list of other known repositories we can talk to
uplinks:
  taobao:
    url: https://registry.npm.taobao.org/
  npmjs:
    url: https://registry.npmjs.org/

packages:
  '@*/*':
    # scoped packages
    # access: $authenticated
    access: $all
    publish: $authenticated
    unpublish: $authenticated
    #proxy: npmjs
    proxy: taobao npmjs
    gitlab: true

  '**':
    # allow all users (including non-authenticated users) to read and
    # publish all packages
    #
    # you can specify usernames/groupnames (depending on your auth plugin)
    # and three keywords: "$all", "$anonymous", "$authenticated"
    access: $all

    # allow all known users to publish packages
    # (anyone can register by default, remember?)
    publish: $authenticated
    unpublish: $authenticated

    # if package is not available locally, proxy requests to 'npmjs' registry
    #proxy: npmjs
    proxy: taobao npmjs
    gitlab: true

# You can specify HTTP/1.1 server keep alive timeout in seconds for incomming connections.
# A value of 0 makes the http server behave similarly to Node.js versions prior to 8.0.0, which did not have a keep-alive timeout.
# WORKAROUND: Through given configuration you can workaround following issue https://github.com/verdaccio/verdaccio/issues/301. Set to 0 in case 60 is not enought.
server:
  keepAliveTimeout: 60

# To use `npm audit` uncomment the following section
middlewares:
  audit:
    enabled: true

# log settings
logs:
  - { type: stdout, format: pretty, level: trace }
  #- {type: file, path: verdaccio.log, level: info}

Environment information

Debugging output

• $ NODE_DEBUG=request verdaccio display request calls (verdaccio <--> uplinks)
• $ DEBUG=express:* verdaccio enable extreme verdaccio debug mode (verdaccio api)
• $ npm -ddd prints:
• $ npm config get registry prints:

[lfire]

I think the problem is in project @verdaccio/ui-theme, but i'm not sure.
because i debug with the project on local, and add the config like this

the API will success.

But when i add the same config to package.json in verdaccio project, the problem can not be fixed.

NODE_OPTIONS='--max-http-header-size=40000'

[juanpicado]

Hi,

You would need describe your environment, seems like something specific for you.

[lfire]

Hi,

You would need describe your environment, seems like something specific for you.

I use nvm, and install the version 12.16.3

 nvm ls

    15.5.1
    14.15.3
  * 12.16.3 (Currently using 64-bit executable)
    10.20.1
    8.9.4

The deploy project code is verdaccio-gitlab[https://github.com/bufferoverflow/verdaccio-gitlab], and I also checked the code in @verdaccio/ui-theme.

[lfire]

schema	token short	token longer
https	success	error
http	success	success

error message:

short-token: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.ECahCFfMdrFfTx6Gliq0JLCDdi-HH37uZUgMduj4jW4

longer-token: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJyZWFsX2dyb3VwcyI6WyJsaXl6IiwiYWl1ZWQiLCJicGx1cyIsImhhb3RpYW4iLCJvY2oiLCJzYW55dWFuIiwid3VtaSIsImxpeXovdmVyZGFjY2lvLWdpdGxhYiIsIm9jai93YXRlcmZhbGwiLCJvY2ovdnVlLXRlbXBsYXRlLXdhcC1zaW1wbGUiLCJvY2ovdnVlLXRlbXBsYXRlLXByb2plY3QtdHMiLCJvY2ovdnVlLXRlbXBsYXRlLXByb2plY3Qtc2ltcGxlIiwib2NqL3Z1ZS1jb21wb25lbnQtdHMtc2ltcGxlLXRlbXBsYXRlIiwib2NqL3Z1ZS1jb21wb25lbnQtc2ltcGxlLXRlbXBsYXRlIiwib2NqL3Z1ZS1jbGktcGx1Z2luLW9jai1jbXMiLCJvY2ovdnVlLWNsaS1wbHVnaW4tY29kZXBlbiIsIm9jai92dWUtY2xpLXBsdWdpbi1hY29kZSIsIm9jai90b3VjaC1lbXVsYXRvciIsIm9jai90YXJnZXQtd2VicGFjay1wbHVnaW4iLCJvY2ovc3R5bGVsaW50LWNvbmZpZyIsIm9jai9vY2otb3ZleC1pY29ucyIsIm9jai9vY2otb3ZleCIsIm9jai9vdmV4Iiwib2NqL29jai1vdCIsIm9jai9vY2otc2Nzc2RvYyIsIm9jai9vY2otZXJwLWNvbXBvbmVudHMiLCJvY2ovb2NqLWVycC1jb21tb24iLCJvY2ovb2NqLWNvbXBvbmVudHMiLCJvY2ovb2NqLWNsaS10ZW1wbGF0ZSIsIm9jai9vY2otY2xpLWVycCIsIm9jai9vdmV4LW1hcmtkb3duLXZldHVyIiwib2NqL292ZXgtbWFya2Rvd24tbG9hZGVyIiwib2NqL292ZXgtbGludC1odXNreSIsIm9jai9vdmV4LWljb25zIiwib2NqL2ZveC12dWUtcGx1Z2luIiwib2NqL2ZveC10ZW1wbGF0ZSIsIm9jai9mb3gtbG9hZGVyIiwib2NqL2ZveC1nZW5lcmF0b3ItdGVtcGxhdGUiLCJvY2ovZm94LWNzcy1sb2FkZXIiLCJvY2ovZm94LWNtcy1wYWdlLXRlbXBsYXRlIiwib2NqL25wbS1mb3giLCJvY2ovZXNsaW50LWNvbmZpZy1vdmV4Iiwib2NqL2VzbGludC1jb25maWctb2NqLXZ1ZSIsIm9jai9vdmV4LWVzbGludC1jb25maWciLCJvY2ovY29tbW9uLXNjc3MiLCJvY2ovZm94LWNsaS1wbHVnaW4tZXNsaW50Iiwib2NqL2ZveC1jbGktcGx1Z2luLWNzcyIsIm9jai9mb3gtY2xpLXBsdWdpbi1iYWJlbCIsIm9jai9mb3gtY2xpIiwib2NqL292ZXgtY2xpIiwiYWl1ZWQvYWlmbG93IiwiYWl1ZWQvYWlwcm8iLCJvY2ovdnVlLWNvbXBvbmVudHMtdmlkZW8taXRlbXMiLCJvY2ovdnVlLWNvbXBvbmVudHMtdG9waWNfZ29vZHMiLCJvY2ovdnVlLWNvbXBvbmVudHMtdGFiX25hdiIsIm9jai92dWUtY29tcG9uZW50cy1zd2lwZXIiLCJvY2ovdnVlLWNvbXBvbmVudHMtZ29vZHNfbGlzdCIsIm9jai92dWUtY29tcG9uZW50cy1nb29kc19ncmlkIiwib2NqL3Z1ZS1jb21wb25lbnRzLWJhbm5lci1mdWxsIiwib2NqL2Ntcy1wYWdlLXRlbXBsYXRlIiwib2NqL2ZveCIsIm9jai92dWUtcHJvamVjdC1jbXMtcGFnZS1jb21tb24tdGVzdC00MDciLCJvY2ovY21zLXQtYXBwX2hvbWUiLCJvY2ovdnVlLWNvbXBvbmVudHMtaWNvbl9uYXZfZ3JvdXAiLCJvY2ovd2FwbWVtYmVyIiwib2NqL3Nob3BjYXJ0Iiwib2NqL3NoZWxsanMiLCJvY2ovcm5fYXBwIiwib2NqL2NvbW1vbiIsIm9jai9jbXMiLCJvY2ovY2NtIiwib2NqL2FwcGhvbWUiLCJvY2ovYXBwaHlicmlkIiwib2NqL3d4LW1pbmlwcm9ncmFtIiwib2NqL3dhbGxldHMtaDUiLCJvY2ovc2hvcHBpbmdfY2FydC13ZWIiLCJvY2ovc2VhcmNoLXdlYiIsIm9jai9wcm9kdWN0X2RldGFpbC13ZWIiLCJvY2ovb3JkZXJzLWg1Iiwib2NqL29jbHViLXBjIiwib2NqL29jbHViLWg1Iiwib2NqL21lbWJlcl9jZW50ZXItcGMiLCJvY2ovbWVtYmVyX2NlbnRlci1oNSIsIm9jai9sb2dpbl9yZWdpc3Rlci13ZWIiLCJvY2ovZ3VpZGVzLXBjIiwib2NqL2NvbW1vbl9tb2R1bGUtcGMiLCJvY2ovY29tbW9uX21vZHVsZS1oNSIsImJwbHVzL2FjY291bnQiLCJicGx1cy9hcHAtcGFydG5lcl9oNSIsImJwbHVzL2FwcGhvbWUiLCJicGx1cy9ib20tYmFzaWMiLCJicGx1cy9ib20tY21jIiwiYnBsdXMvYm9tLWVudGVycHJpc2VfZ3JvdXBfYnV5IiwiYnBsdXMvYm9tLXJlcG9ydCIsImJwbHVzL2JvbS11YyIsImJwbHVzL2NjbSIsImJwbHVzL2NtcyIsImJwbHVzL2NvbW1vbl9tb2R1bGUtaDUiLCJicGx1cy9jb250cmFjdCIsImJwbHVzL2Z1bGZpbGwiLCJicGx1cy9nb29kc2hvcCIsImJwbHVzL2ludmVudG9yeSIsImJwbHVzL21hbGwiLCJicGx1cy9tYWxsLWg1IiwiYnBsdXMvbWFsbC1oNS1tZW1iZXIiLCJicGx1cy9tYWxsLW1lbWJlciIsImJwbHVzL21lZGlhIiwiYnBsdXMvbW9iaWxlaG9tZSIsImJwbHVzL29jai1kZXNpZ24iLCJicGx1cy9vY2otZXJwLWNvbXBvbmVudHMiLCJicGx1cy9vY2otZm9vZHNfc2FmZXR5IiwiYnBsdXMvcGFydG5lci1pbnZlbnRvcnkiLCJicGx1cy9yZXBvcnQtY29uc29sZSIsImJwbHVzL3NlbSIsImJwbHVzL3R2LWg1IiwiYnBsdXMvdnVlLXByb2plY3QtY21zLXBhZ2UtY29tbW9uLXRlc3QiLCJicGx1cy93eC1taW5pcHJvZ3JhbSIsImJwbHVzL3NlYXJjaC1oNSIsImJwbHVzL21pZGRsZXdhcmUiLCJicGx1cy9jYXRlZ29yeSIsImJwbHVzL29jbHViLWg1IiwiYnBsdXMvZm9vdGJhciIsImJwbHVzL3NlYXJjaC13ZWIiLCJicGx1cy9wYXJ0bmVyLWJhc2ljIiwiYnBsdXMvZXRpY2tldC1wYXJ0bmVyIiwiYnBsdXMvc2VtLWNvbnNvbGUiLCJicGx1cy9wb3J0YWwiLCJicGx1cy9wYXJ0bmVyLXNob3AiLCJicGx1cy9zaG9wcGluZ19jYXJ0LXdlYiIsImJwbHVzL3Byb2R1Y3QiLCJicGx1cy9sb2dpbl9yZWdpc3Rlci13ZWIiLCJicGx1cy9kaXNjb3ZlciIsImJwbHVzL3BhcnRuZXItZnVsZmlsbCIsImJwbHVzL2NwbS1zZXR0bGVtZW50IiwiYnBsdXMvc2V0dGxlbWVudCIsImJwbHVzL3dhbGxldHMtaDUiLCJicGx1cy9ib20tcGFydG5lciIsImJwbHVzL3BhcnRuZXItcHJvZHVjdCIsImJwbHVzL21lbWJlcl9jZW50ZXItaDUiLCJicGx1cy9taW5pYXBwIiwiYnBsdXMvaW5pdCIsImJwbHVzL3Byb2R1Y3RfZGV0YWlsLXdlYiIsImJwbHVzL2NvbW1vbiIsImJwbHVzL3BhcnRuZXIiLCJicGx1cy9iYXNpYy1jb21wb25lbnQiLCJicGx1cy9vcmRlcnMtaDUiLCJvY2ovYXV0by1jb2RlLXdlYnBhY2stcGx1Z2luIiwid3VtaS9vcGVucmVzdHkiLCJ3dW1pL2RvbWFpbi12ZXJpZnkiLCJzYW55dWFuL2FkbWluLXdlYiIsInNhbnl1YW4vbWluaS1hcHAiLCJzYW55dWFuL2FwaS1zZXJ2ZXIiLCJsaXl6L3Rlc3QtcGFnZXMiLCJ3dW1pL2V4YW0iLCJ3dW1pL2FudC1kZXNpZ24tcHJvLXZ1ZSIsImhhb3RpYW4vaGFvdGlhbi1hcGkiLCJoYW90aWFuL2hhb3RpYW4td2FwIiwiaGFvdGlhbi9oYW90aWFuLWFkbWluIiwibGl5ei92dWUtY2xhc3MiLCJsaXl6L3podWZlbmciLCJoYW90aWFuL2hhb3RpYW4iLCJsaXl6L3Rlc3QtbnBtIiwibGl5ei93ZWJwYWNrNCIsImxpeXovbGZpcmVub3RlIiwibGl5ei93dW1pLXRlc3QiLCJsaXl6L2FsaWRvbWFpbiIsInd1bWkvbWlsaWp1Il0sIm5hbWUiOiJsaXl6IiwiZ3JvdXBzIjpbImxpeXoiLCJhaXVlZCIsImJwbHVzIiwiaGFvdGlhbiIsIm9jaiIsInNhbnl1YW4iLCJ3dW1pIiwibGl5ei92ZXJkYWNjaW8tZ2l0bGFiIiwib2NqL3dhdGVyZmFsbCIsIm9jai92dWUtdGVtcGxhdGUtd2FwLXNpbXBsZSIsIm9jai92dWUtdGVtcGxhdGUtcHJvamVjdC10cyIsIm9jai92dWUtdGVtcGxhdGUtcHJvamVjdC1zaW1wbGUiLCJvY2ovdnVlLWNvbXBvbmVudC10cy1zaW1wbGUtdGVtcGxhdGUiLCJvY2ovdnVlLWNvbXBvbmVudC1zaW1wbGUtdGVtcGxhdGUiLCJvY2ovdnVlLWNsaS1wbHVnaW4tb2NqLWNtcyIsIm9jai92dWUtY2xpLXBsdWdpbi1jb2RlcGVuIiwib2NqL3Z1ZS1jbGktcGx1Z2luLWFjb2RlIiwib2NqL3RvdWNoLWVtdWxhdG9yIiwib2NqL3RhcmdldC13ZWJwYWNrLXBsdWdpbiIsIm9jai9zdHlsZWxpbnQtY29uZmlnIiwib2NqL29jai1vdmV4LWljb25zIiwib2NqL29jai1vdmV4Iiwib2NqL292ZXgiLCJvY2ovb2NqLW90Iiwib2NqL29jai1zY3NzZG9jIiwib2NqL29jai1lcnAtY29tcG9uZW50cyIsIm9jai9vY2otZXJwLWNvbW1vbiIsIm9jai9vY2otY29tcG9uZW50cyIsIm9jai9vY2otY2xpLXRlbXBsYXRlIiwib2NqL29jai1jbGktZXJwIiwib2NqL292ZXgtbWFya2Rvd24tdmV0dXIiLCJvY2ovb3ZleC1tYXJrZG93bi1sb2FkZXIiLCJvY2ovb3ZleC1saW50LWh1c2t5Iiwib2NqL292ZXgtaWNvbnMiLCJvY2ovZm94LXZ1ZS1wbHVnaW4iLCJvY2ovZm94LXRlbXBsYXRlIiwib2NqL2ZveC1sb2FkZXIiLCJvY2ovZm94LWdlbmVyYXRvci10ZW1wbGF0ZSIsIm9jai9mb3gtY3NzLWxvYWRlciIsIm9jai9mb3gtY21zLXBhZ2UtdGVtcGxhdGUiLCJvY2ovbnBtLWZveCIsIm9jai9lc2xpbnQtY29uZmlnLW92ZXgiLCJvY2ovZXNsaW50LWNvbmZpZy1vY2otdnVlIiwib2NqL292ZXgtZXNsaW50LWNvbmZpZyIsIm9jai9jb21tb24tc2NzcyIsIm9jai9mb3gtY2xpLXBsdWdpbi1lc2xpbnQiLCJvY2ovZm94LWNsaS1wbHVnaW4tY3NzIiwib2NqL2ZveC1jbGktcGx1Z2luLWJhYmVsIiwib2NqL2ZveC1jbGkiLCJvY2ovb3ZleC1jbGkiLCJhaXVlZC9haWZsb3ciLCJhaXVlZC9haXBybyIsIm9jai92dWUtY29tcG9uZW50cy12aWRlby1pdGVtcyIsIm9jai92dWUtY29tcG9uZW50cy10b3BpY19nb29kcyIsIm9jai92dWUtY29tcG9uZW50cy10YWJfbmF2Iiwib2NqL3Z1ZS1jb21wb25lbnRzLXN3aXBlciIsIm9jai92dWUtY29tcG9uZW50cy1nb29kc19saXN0Iiwib2NqL3Z1ZS1jb21wb25lbnRzLWdvb2RzX2dyaWQiLCJvY2ovdnVlLWNvbXBvbmVudHMtYmFubmVyLWZ1bGwiLCJvY2ovY21zLXBhZ2UtdGVtcGxhdGUiLCJvY2ovZm94Iiwib2NqL3Z1ZS1wcm9qZWN0LWNtcy1wYWdlLWNvbW1vbi10ZXN0LTQwNyIsIm9jai9jbXMtdC1hcHBfaG9tZSIsIm9jai92dWUtY29tcG9uZW50cy1pY29uX25hdl9ncm91cCIsIm9jai93YXBtZW1iZXIiLCJvY2ovc2hvcGNhcnQiLCJvY2ovc2hlbGxqcyIsIm9jai9ybl9hcHAiLCJvY2ovY29tbW9uIiwib2NqL2NtcyIsIm9jai9jY20iLCJvY2ovYXBwaG9tZSIsIm9jai9hcHBoeWJyaWQiLCJvY2ovd3gtbWluaXByb2dyYW0iLCJvY2ovd2FsbGV0cy1oNSIsIm9jai9zaG9wcGluZ19jYXJ0LXdlYiIsIm9jai9zZWFyY2gtd2ViIiwib2NqL3Byb2R1Y3RfZGV0YWlsLXdlYiIsIm9jai9vcmRlcnMtaDUiLCJvY2ovb2NsdWItcGMiLCJvY2ovb2NsdWItaDUiLCJvY2ovbWVtYmVyX2NlbnRlci1wYyIsIm9jai9tZW1iZXJfY2VudGVyLWg1Iiwib2NqL2xvZ2luX3JlZ2lzdGVyLXdlYiIsIm9jai9ndWlkZXMtcGMiLCJvY2ovY29tbW9uX21vZHVsZS1wYyIsIm9jai9jb21tb25fbW9kdWxlLWg1IiwiYnBsdXMvYWNjb3VudCIsImJwbHVzL2FwcC1wYXJ0bmVyX2g1IiwiYnBsdXMvYXBwaG9tZSIsImJwbHVzL2JvbS1iYXNpYyIsImJwbHVzL2JvbS1jbWMiLCJicGx1cy9ib20tZW50ZXJwcmlzZV9ncm91cF9idXkiLCJicGx1cy9ib20tcmVwb3J0IiwiYnBsdXMvYm9tLXVjIiwiYnBsdXMvY2NtIiwiYnBsdXMvY21zIiwiYnBsdXMvY29tbW9uX21vZHVsZS1oNSIsImJwbHVzL2NvbnRyYWN0IiwiYnBsdXMvZnVsZmlsbCIsImJwbHVzL2dvb2RzaG9wIiwiYnBsdXMvaW52ZW50b3J5IiwiYnBsdXMvbWFsbCIsImJwbHVzL21hbGwtaDUiLCJicGx1cy9tYWxsLWg1LW1lbWJlciIsImJwbHVzL21hbGwtbWVtYmVyIiwiYnBsdXMvbWVkaWEiLCJicGx1cy9tb2JpbGVob21lIiwiYnBsdXMvb2NqLWRlc2lnbiIsImJwbHVzL29jai1lcnAtY29tcG9uZW50cyIsImJwbHVzL29jai1mb29kc19zYWZldHkiLCJicGx1cy9wYXJ0bmVyLWludmVudG9yeSIsImJwbHVzL3JlcG9ydC1jb25zb2xlIiwiYnBsdXMvc2VtIiwiYnBsdXMvdHYtaDUiLCJicGx1cy92dWUtcHJvamVjdC1jbXMtcGFnZS1jb21tb24tdGVzdCIsImJwbHVzL3d4LW1pbmlwcm9ncmFtIiwiYnBsdXMvc2VhcmNoLWg1IiwiYnBsdXMvbWlkZGxld2FyZSIsImJwbHVzL2NhdGVnb3J5IiwiYnBsdXMvb2NsdWItaDUiLCJicGx1cy9mb290YmFyIiwiYnBsdXMvc2VhcmNoLXdlYiIsImJwbHVzL3BhcnRuZXItYmFzaWMiLCJicGx1cy9ldGlja2V0LXBhcnRuZXIiLCJicGx1cy9zZW0tY29uc29sZSIsImJwbHVzL3BvcnRhbCIsImJwbHVzL3BhcnRuZXItc2hvcCIsImJwbHVzL3Nob3BwaW5nX2NhcnQtd2ViIiwiYnBsdXMvcHJvZHVjdCIsImJwbHVzL2xvZ2luX3JlZ2lzdGVyLXdlYiIsImJwbHVzL2Rpc2NvdmVyIiwiYnBsdXMvcGFydG5lci1mdWxmaWxsIiwiYnBsdXMvY3BtLXNldHRsZW1lbnQiLCJicGx1cy9zZXR0bGVtZW50IiwiYnBsdXMvd2FsbGV0cy1oNSIsImJwbHVzL2JvbS1wYXJ0bmVyIiwiYnBsdXMvcGFydG5lci1wcm9kdWN0IiwiYnBsdXMvbWVtYmVyX2NlbnRlci1oNSIsImJwbHVzL21pbmlhcHAiLCJicGx1cy9pbml0IiwiYnBsdXMvcHJvZHVjdF9kZXRhaWwtd2ViIiwiYnBsdXMvY29tbW9uIiwiYnBsdXMvcGFydG5lciIsImJwbHVzL2Jhc2ljLWNvbXBvbmVudCIsImJwbHVzL29yZGVycy1oNSIsIm9jai9hdXRvLWNvZGUtd2VicGFjay1wbHVnaW4iLCJ3dW1pL29wZW5yZXN0eSIsInd1bWkvZG9tYWluLXZlcmlmeSIsInNhbnl1YW4vYWRtaW4td2ViIiwic2FueXVhbi9taW5pLWFwcCIsInNhbnl1YW4vYXBpLXNlcnZlciIsImxpeXovdGVzdC1wYWdlcyIsInd1bWkvZXhhbSIsInd1bWkvYW50LWRlc2lnbi1wcm8tdnVlIiwiaGFvdGlhbi9oYW90aWFuLWFwaSIsImhhb3RpYW4vaGFvdGlhbi13YXAiLCJoYW90aWFuL2hhb3RpYW4tYWRtaW4iLCJsaXl6L3Z1ZS1jbGFzcyIsImxpeXovemh1ZmVuZyIsImhhb3RpYW4vaGFvdGlhbiIsImxpeXovdGVzdC1ucG0iLCJsaXl6L3dlYnBhY2s0IiwibGl5ei9sZmlyZW5vdGUiLCJsaXl6L3d1bWktdGVzdCIsImxpeXovYWxpZG9tYWluIiwid3VtaS9taWxpanUiLCIkYWxsIiwiJGF1dGhlbnRpY2F0ZWQiLCJAYWxsIiwiQGF1dGhlbnRpY2F0ZWQiLCJhbGwiLCJsaXl6IiwiYWl1ZWQiLCJicGx1cyIsImhhb3RpYW4iLCJvY2oiLCJzYW55dWFuIiwid3VtaSIsImxpeXovdmVyZGFjY2lvLWdpdGxhYiIsIm9jai93YXRlcmZhbGwiLCJvY2ovdnVlLXRlbXBsYXRlLXdhcC1zaW1wbGUiLCJvY2ovdnVlLXRlbXBsYXRlLXByb2plY3QtdHMiLCJvY2ovdnVlLXRlbXBsYXRlLXByb2plY3Qtc2ltcGxlIiwib2NqL3Z1ZS1jb21wb25lbnQtdHMtc2ltcGxlLXRlbXBsYXRlIiwib2NqL3Z1ZS1jb21wb25lbnQtc2ltcGxlLXRlbXBsYXRlIiwib2NqL3Z1ZS1jbGktcGx1Z2luLW9jai1jbXMiLCJvY2ovdnVlLWNsaS1wbHVnaW4tY29kZXBlbiIsIm9jai92dWUtY2xpLXBsdWdpbi1hY29kZSIsIm9jai90b3VjaC1lbXVsYXRvciIsIm9jai90YXJnZXQtd2VicGFjay1wbHVnaW4iLCJvY2ovc3R5bGVsaW50LWNvbmZpZyIsIm9jai9vY2otb3ZleC1pY29ucyIsIm9jai9vY2otb3ZleCIsIm9jai9vdmV4Iiwib2NqL29jai1vdCIsIm9jai9vY2otc2Nzc2RvYyIsIm9jai9vY2otZXJwLWNvbXBvbmVudHMiLCJvY2ovb2NqLWVycC1jb21tb24iLCJvY2ovb2NqLWNvbXBvbmVudHMiLCJvY2ovb2NqLWNsaS10ZW1wbGF0ZSIsIm9jai9vY2otY2xpLWVycCIsIm9jai9vdmV4LW1hcmtkb3duLXZldHVyIiwib2NqL292ZXgtbWFya2Rvd24tbG9hZGVyIiwib2NqL292ZXgtbGludC1odXNreSIsIm9jai9vdmV4LWljb25zIiwib2NqL2ZveC12dWUtcGx1Z2luIiwib2NqL2ZveC10ZW1wbGF0ZSIsIm9jai9mb3gtbG9hZGVyIiwib2NqL2ZveC1nZW5lcmF0b3ItdGVtcGxhdGUiLCJvY2ovZm94LWNzcy1sb2FkZXIiLCJvY2ovZm94LWNtcy1wYWdlLXRlbXBsYXRlIiwib2NqL25wbS1mb3giLCJvY2ovZXNsaW50LWNvbmZpZy1vdmV4Iiwib2NqL2VzbGludC1jb25maWctb2NqLXZ1ZSIsIm9jai9vdmV4LWVzbGludC1jb25maWciLCJvY2ovY29tbW9uLXNjc3MiLCJvY2ovZm94LWNsaS1wbHVnaW4tZXNsaW50Iiwib2NqL2ZveC1jbGktcGx1Z2luLWNzcyIsIm9jai9mb3gtY2xpLXBsdWdpbi1iYWJlbCIsIm9jai9mb3gtY2xpIiwib2NqL292ZXgtY2xpIiwiYWl1ZWQvYWlmbG93IiwiYWl1ZWQvYWlwcm8iLCJvY2ovdnVlLWNvbXBvbmVudHMtdmlkZW8taXRlbXMiLCJvY2ovdnVlLWNvbXBvbmVudHMtdG9waWNfZ29vZHMiLCJvY2ovdnVlLWNvbXBvbmVudHMtdGFiX25hdiIsIm9jai92dWUtY29tcG9uZW50cy1zd2lwZXIiLCJvY2ovdnVlLWNvbXBvbmVudHMtZ29vZHNfbGlzdCIsIm9jai92dWUtY29tcG9uZW50cy1nb29kc19ncmlkIiwib2NqL3Z1ZS1jb21wb25lbnRzLWJhbm5lci1mdWxsIiwib2NqL2Ntcy1wYWdlLXRlbXBsYXRlIiwib2NqL2ZveCIsIm9jai92dWUtcHJvamVjdC1jbXMtcGFnZS1jb21tb24tdGVzdC00MDciLCJvY2ovY21zLXQtYXBwX2hvbWUiLCJvY2ovdnVlLWNvbXBvbmVudHMtaWNvbl9uYXZfZ3JvdXAiLCJvY2ovd2FwbWVtYmVyIiwib2NqL3Nob3BjYXJ0Iiwib2NqL3NoZWxsanMiLCJvY2ovcm5fYXBwIiwib2NqL2NvbW1vbiIsIm9jai9jbXMiLCJvY2ovY2NtIiwib2NqL2FwcGhvbWUiLCJvY2ovYXBwaHlicmlkIiwib2NqL3d4LW1pbmlwcm9ncmFtIiwib2NqL3dhbGxldHMtaDUiLCJvY2ovc2hvcHBpbmdfY2FydC13ZWIiLCJvY2ovc2VhcmNoLXdlYiIsIm9jai9wcm9kdWN0X2RldGFpbC13ZWIiLCJvY2ovb3JkZXJzLWg1Iiwib2NqL29jbHViLXBjIiwib2NqL29jbHViLWg1Iiwib2NqL21lbWJlcl9jZW50ZXItcGMiLCJvY2ovbWVtYmVyX2NlbnRlci1oNSIsIm9jai9sb2dpbl9yZWdpc3Rlci13ZWIiLCJvY2ovZ3VpZGVzLXBjIiwib2NqL2NvbW1vbl9tb2R1bGUtcGMiLCJvY2ovY29tbW9uX21vZHVsZS1oNSIsImJwbHVzL2FjY291bnQiLCJicGx1cy9hcHAtcGFydG5lcl9oNSIsImJwbHVzL2FwcGhvbWUiLCJicGx1cy9ib20tYmFzaWMiLCJicGx1cy9ib20tY21jIiwiYnBsdXMvYm9tLWVudGVycHJpc2VfZ3JvdXBfYnV5IiwiYnBsdXMvYm9tLXJlcG9ydCIsImJwbHVzL2JvbS11YyIsImJwbHVzL2NjbSIsImJwbHVzL2NtcyIsImJwbHVzL2NvbW1vbl9tb2R1bGUtaDUiLCJicGx1cy9jb250cmFjdCIsImJwbHVzL2Z1bGZpbGwiLCJicGx1cy9nb29kc2hvcCIsImJwbHVzL2ludmVudG9yeSIsImJwbHVzL21hbGwiLCJicGx1cy9tYWxsLWg1IiwiYnBsdXMvbWFsbC1oNS1tZW1iZXIiLCJicGx1cy9tYWxsLW1lbWJlciIsImJwbHVzL21lZGlhIiwiYnBsdXMvbW9iaWxlaG9tZSIsImJwbHVzL29jai1kZXNpZ24iLCJicGx1cy9vY2otZXJwLWNvbXBvbmVudHMiLCJicGx1cy9vY2otZm9vZHNfc2FmZXR5IiwiYnBsdXMvcGFydG5lci1pbnZlbnRvcnkiLCJicGx1cy9yZXBvcnQtY29uc29sZSIsImJwbHVzL3NlbSIsImJwbHVzL3R2LWg1IiwiYnBsdXMvdnVlLXByb2plY3QtY21zLXBhZ2UtY29tbW9uLXRlc3QiLCJicGx1cy93eC1taW5pcHJvZ3JhbSIsImJwbHVzL3NlYXJjaC1oNSIsImJwbHVzL21pZGRsZXdhcmUiLCJicGx1cy9jYXRlZ29yeSIsImJwbHVzL29jbHViLWg1IiwiYnBsdXMvZm9vdGJhciIsImJwbHVzL3NlYXJjaC13ZWIiLCJicGx1cy9wYXJ0bmVyLWJhc2ljIiwiYnBsdXMvZXRpY2tldC1wYXJ0bmVyIiwiYnBsdXMvc2VtLWNvbnNvbGUiLCJicGx1cy9wb3J0YWwiLCJicGx1cy9wYXJ0bmVyLXNob3AiLCJicGx1cy9zaG9wcGluZ19jYXJ0LXdlYiIsImJwbHVzL3Byb2R1Y3QiLCJicGx1cy9sb2dpbl9yZWdpc3Rlci13ZWIiLCJicGx1cy9kaXNjb3ZlciIsImJwbHVzL3BhcnRuZXItZnVsZmlsbCIsImJwbHVzL2NwbS1zZXR0bGVtZW50IiwiYnBsdXMvc2V0dGxlbWVudCIsImJwbHVzL3dhbGxldHMtaDUiLCJicGx1cy9ib20tcGFydG5lciIsImJwbHVzL3BhcnRuZXItcHJvZHVjdCIsImJwbHVzL21lbWJlcl9jZW50ZXItaDUiLCJicGx1cy9taW5pYXBwIiwiYnBsdXMvaW5pdCIsImJwbHVzL3Byb2R1Y3RfZGV0YWlsLXdlYiIsImJwbHVzL2NvbW1vbiIsImJwbHVzL3BhcnRuZXIiLCJicGx1cy9iYXNpYy1jb21wb25lbnQiLCJicGx1cy9vcmRlcnMtaDUiLCJvY2ovYXV0by1jb2RlLXdlYnBhY2stcGx1Z2luIiwid3VtaS9vcGVucmVzdHkiLCJ3dW1pL2RvbWFpbi12ZXJpZnkiLCJzYW55dWFuL2FkbWluLXdlYiIsInNhbnl1YW4vbWluaS1hcHAiLCJzYW55dWFuL2FwaS1zZXJ2ZXIiLCJsaXl6L3Rlc3QtcGFnZXMiLCJ3dW1pL2V4YW0iLCJ3dW1pL2FudC1kZXNpZ24tcHJvLXZ1ZSIsImhhb3RpYW4vaGFvdGlhbi1hcGkiLCJoYW90aWFuL2hhb3RpYW4td2FwIiwiaGFvdGlhbi9oYW90aWFuLWFkbWluIiwibGl5ei92dWUtY2xhc3MiLCJsaXl6L3podWZlbmciLCJoYW90aWFuL2hhb3RpYW4iLCJsaXl6L3Rlc3QtbnBtIiwibGl5ei93ZWJwYWNrNCIsImxpeXovbGZpcmVub3RlIiwibGl5ei93dW1pLXRlc3QiLCJsaXl6L2FsaWRvbWFpbiIsInd1bWkvbWlsaWp1Il0sImlhdCI6MTYxMTA0OTgxMSwibmJmIjoxNjExMDQ5ODExLCJleHAiOjE2MTE2NTQ2MTF9.y12skfIP9R8r9chEV0IQDfNXuay-ag2vEo4Kt_o-HZo

[lfire]

@juanpicado The root of the problem is that the token is too large, causing the API request to fail. Can we consider moving the parameter(authorization) from header to body?

[juanpicado]

If you describe your issue and your environment then is much easier to see the big picture. That said, if you are using gitlab plugin, have you asked in their forum ? I recall similar topic.

Answering your question, no we cannot move to body, is an authorization header.

[lfire]

@juanpicado Sorry, this is my mistake. I found that my Nginx config http2, and I used the default config of http2_max_field_size(4k), so the request will fail when the token is bigger than 4k(13.8k).
very sorry to disturb you.

[juanpicado]

That's exactly the reason why I asked about big picture, check this bufferoverflow/verdaccio-gitlab#79

[juanpicado]

I encourage you to add this info to https://verdaccio.org/docs/en/reverse-proxy so others can easily solve this issue
https://github.com/verdaccio/website/blob/master/docs/reverse-proxy.md
feel free to contribute