Skip to content

AbstractDeviceGrant.scope is CharField(max_length=64, null=True) while the rest of the grants use scope = models.TextField(blank=True) #1693

@dopry

Description

@dopry

Describe the bug
64 chars could be too small for scopes.

Reviewing the broader auth ecosystem I see the following limits

  • okta - 1024
  • google - 2048
  • WSO2 - 767

so 64 feels insuffient.

While Text is potentially larger than webserver header limits (8/16K) and browser url limits (2048), it shift the resposbility for ensuring acceptable scope lengths from DOT to the implementer without restricting them if they want to push the limits.

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions