Hello, I think its great that Auth0 is supporting RFC 6749 specifications. I have switched off the fixed length size for auth codes and access tokens, but it still would be nice to know the max sizes that could be returned. In addition to the spec mentioning “The authorization code string size is l…

Here is the update: For a token that is meant to be used with the userinfo endpoint, the customer is safe to assume that the size of the token will not exceed 4096 characters. In the general case, the exact content of access tokens cannot be determined beforehand (e.g scopes and claims can vary i…

Variable Length Authorization Code and Access Token Max Size

Help

dan.woda October 21, 2021, 9:41pm 3

Hi @blairt,

Welcome to the Auth0 Community!

Thanks for reaching out on this. As far as I know, we don’t have docs on token and auth code sizes, but I am investigating and will update here with my findings.

Authorization Code and Access Token Variable Size

Topic		Replies	Views
Authorization Code and Access Token Variable Size Help auth0 , access-token	2	2582	March 10, 2022
Authorization Code and Access Token Variable Size Information questions Knowledge Articles opaque-tokens , authorization-code , variable-size , fixed-length	1	1664	April 15, 2023
Opaque Access Token and Authorization Code Fixed Length Announcement Announcements auth0 , announcements , authorization , opaque-access-token	1	6313	November 21, 2021
Accounts, some mystery Help	2	1837	June 28, 2022
Does auth0-spa-js support variable size access tokens? Help access-token , authorization-code , auth0-spa-js	2	2739	November 8, 2021

Variable Length Authorization Code and Access Token Max Size

Related topics