Access Token size is still fixed even after disabling "Fixed Length of Access Token & Authorization Code"

I have disabled “Fixed Length of Access Token & Authorization Code” but I still get a fixed length token (1505). Am I missing something?

Hi @anunez,

Welcome back to the Auth0 Community!

Can you please share an example of the access token you are seeing? Feel free to DM it to me for privacy. Additionally, can you send the tenant name?

Thanks @dan.woda, I’ll write you a DM right away.


It looks like you sent me a non-opaque JWT token. A few key points here:

  • only opaque tokens are affected by this change
  • JWT token lengths are entirely dependent on their payload, so the length is going to be the same if the token’s payload doesn’t change

Hopefully that clears things up! :smiley:

1 Like