[Bug]: Infinite loop if the Csrf cookie is set twice

[Primexz]

OAuth2-Proxy Version

7.6.0

Provider

None

Expected Behaviour

If I have two invalid CSRF cookies as a user, I expect to be able to log in without deleting my cookies.

Current Behaviour

As soon as the CSRF token is set twice, a user will end up in the endless loop and will no longer be able to log in without deleting their cookies.

Screen.Recording.2024-04-10.at.15.20.30.mov

Steps To Reproduce

1. Set two cookies with the same name (preferably with two different domains, in this example the wildcard "." was used)
2. try to log in (you will see a 403)
3. try to press Login in the error form of the OAuth2 proxy
4. you will end up on the 403 page again

Possible Solutions

The solution I have in mind is to search all cookies with the correct name to see if a matching CSRF cookie can be found.

Configuration details or additional information

No response

[diegopazosrego]

I solved this bug adding this 2 options in the deployment of Oauth2-proxy @Primexz !

"--cookie-csrf-per-request=true",
"--cookie-csrf-expire=5m", 

After add this, you have to restart your deployment.