Missing permission (scope) from the token if the user has more then 53

[dan.woda]

Hi @rczjns,

Welcome to the Community!

From what I can find, there shouldn’t be a limit on the number of scopes per se, but you may run into token size limit from the browser.

Take a look at this post that talks about a similar scenario:

Limit for number of scopes per API

Hi @j.makishi. There’s no documented limit for the number of scopes that you can add to an API definition. If the scopes you are providing will be dynamically requested/added and you don’t need a consent for them, you can add a scope in a rule without it being previously defined for the API. In terms of the number of scopes that can actually be included in a token, you might be bound by the size of the JWT token when used in the Authorization header (the HTTP protocol doesn’t define any limit …