From: Mira Limbeck Date: Wed, 15 Jun 2022 14:09:50 +0000 (+0200) Subject: fix #4074: increase API OpenID code size limit to 2048 X-Git-Url: https://git.proxmox.com/?p=pve-access-control.git;a=commitdiff_plain;h=fe52bc631c2024fa0d7396830fc99be90905f103 fix #4074: increase API OpenID code size limit to 2048 Azure AD seems to have a variable authorization code size, depending on the browser state according to one report in bug #4074 [0]. Sometimes the size is greater than our current limit of 1024, so increase it to 2048. The RFC [1] mentions that there is no limit to the code size, but based on current experience, a size limit of 2048 might be enough for every current OpenID Connect provider. [0] https://bugzilla.proxmox.com/show_bug.cgi?id=4074 [1] https://datatracker.ietf.org/doc/html/rfc6749#section-4.1.2 Signed-off-by: Mira Limbeck [w.bumiller@proxmox.com: bump to 4096] Signed-off-by: Wolfgang Bumiller --- diff --git a/src/PVE/API2/OpenId.pm b/src/PVE/API2/OpenId.pm index c838b2c..77410e6 100644 --- a/src/PVE/API2/OpenId.pm +++ b/src/PVE/API2/OpenId.pm @@ -134,7 +134,7 @@ __PACKAGE__->register_method ({ code => { description => "OpenId authorization code.", type => 'string', - maxLength => 1024, + maxLength => 4096, }, 'redirect-url' => { description => "Redirection Url. The client should set this to the used server url (location.origin).",