OIDC Authorization code affinity loadbalancing

Scott Cantor scott at restingparrotsoftware.com
Wed Sep 2 16:08:16 UTC 2026


> Since POST can be used, that alone seemed to be a dealbreaker...

I guess you did address that. I would have assumed that to be impossible since it means buffering the request body in the load balancer, I just figured they'd rule that out of bounds. (Like in Apache, you can only read it once, so calling the APIs again won't work.)

-- Scott



More information about the users mailing list