Hello, I think its great that Auth0 is supporting RFC 6749 specifications. I have switched off the fixed length size for auth codes and access tokens, but it still would be nice to know the max sizes that could be returned. In addition to the spec mentioning “The authorization code string size is l…

Here is the update: For a token that is meant to be used with the userinfo endpoint, the customer is safe to assume that the size of the token will not exceed 4096 characters. In the general case, the exact content of access tokens cannot be determined beforehand (e.g scopes and claims can vary i…

Variable Length Authorization Code and Access Token Max Size

Help

dan.woda October 21, 2021, 9:41pm 3

Hi @blairt,

Welcome to the Auth0 Community!

Thanks for reaching out on this. As far as I know, we don’t have docs on token and auth code sizes, but I am investigating and will update here with my findings.

Authorization Code and Access Token Variable Size

Topic		Replies	Views
Java SDK : Authorization Code and Access Token Variable Size Help java	2	2476	February 3, 2022
What is the Maximum Request Size for the '/oauth/token' Endpoint Knowledge Articles token , api , authentication	1	8	September 5, 2024
Align Auth0 Password Capabilities with Current Recommendations from NIST and OWASP Feedback	0	201	May 15, 2024
Management & Authentication API Input Validation Help api , validation	3	3510	August 28, 2019
Customize Maximum Password Length Knowledge Articles database , password-policy , password-length	1	2979	August 11, 2022

Variable Length Authorization Code and Access Token Max Size

Related Topics