HTTP/1: Allow independent max authorization/cookie length

Adds two options:

 * max_authorization_header_value_length to configure the
   maximum length of the authorization header specifically;

 * max_cookie_header_value_length to configure the
   maximum length of the cookie header specifically.

LH: I added the relevant tests.

1 files changed, 12 insertions, 0 deletions

diff --git a/doc/src/manual/cowboy_http.asciidoc b/doc/src/manual/cowboy_http.asciidoc
index 96a5585..daa48a5 100644
--- a/doc/src/manual/cowboy_http.asciidoc
+++ b/doc/src/manual/cowboy_http.asciidoc
@@ -29,6 +29,8 @@ opts() :: #{
     initial_stream_flow_size   => non_neg_integer(),
     linger_timeout             => timeout(),
     logger                     => module(),
+    max_authorization_header_value_length => non_neg_integer(),
+    max_cookie_header_value_length        => non_neg_integer(),
     max_empty_lines            => non_neg_integer(),
     max_header_name_length     => non_neg_integer(),
     max_header_value_length    => non_neg_integer(),
@@ -131,6 +133,16 @@ logger (error_logger)::
 
 The module that will be used to write log messages.
 
+max_authorization_header_value_length::
+
+Maximum length of the `authorization` header value.
+Defaults to the value of the option `max_header_value_length`.
+
+max_cookie_header_value_length::
+
+Maximum length of the `cookie` header value.
+Defaults to the value of the option `max_header_value_length`.
+
 max_empty_lines (5)::
 
 Maximum number of empty lines before a request.