fix: admit longer session cookies by using a larger store (#4600)

Co-authored-by: Alexander Adler <[email protected]>

server/src/api/login.go

@@ -4,13 +4,15 @@ import (
 	"fmt"
 	"math"
 	"net/http"
+	"os"
 	"strings"
 	"time"
 
 	"scrumlr.io/server/common"
 	"scrumlr.io/server/logger"
 
 	"github.com/go-chi/render"
+	"github.com/gorilla/sessions"
 	"github.com/markbates/goth/gothic"
 	"scrumlr.io/server/common/dto"
 	"scrumlr.io/server/database/types"
@@ -72,6 +74,9 @@ func (s *Server) logout(w http.ResponseWriter, r *http.Request) {
 
 // beginAuthProviderVerification will redirect the user to the specified auth provider consent page
 func (s *Server) beginAuthProviderVerification(w http.ResponseWriter, r *http.Request) {
+	store := sessions.NewFilesystemStore(os.TempDir(), []byte("scrumlr.io"))
+	store.MaxLength(0x8000)
+	gothic.Store = store
 	gothic.BeginAuthHandler(w, r)
 }