Re: [pve-devel] [PATCH access-control] fix #4074: increase API OpenID code size limit to 2048

2022-06-20 Thread Mira Limbeck
On 6/17/22 10:42, Wolfgang Bumiller wrote: On Wed, Jun 15, 2022 at 04:09:50PM +0200, Mira Limbeck wrote: Azure AD seems to have a variable authorization code size, depending on the browser state according to one report in bug #4074 [0]. Sometimes the size is greater than our current limit of

Re: [pve-devel] [PATCH access-control] fix #4074: increase API OpenID code size limit to 2048

2022-06-17 Thread Wolfgang Bumiller
On Wed, Jun 15, 2022 at 04:09:50PM +0200, Mira Limbeck wrote: > Azure AD seems to have a variable authorization code size, depending on > the browser state according to one report in bug #4074 [0]. > > Sometimes the size is greater than our current limit of 1024, so > increase it to 2048. Would

[pve-devel] [PATCH access-control] fix #4074: increase API OpenID code size limit to 2048

2022-06-15 Thread Mira Limbeck
Azure AD seems to have a variable authorization code size, depending on the browser state according to one report in bug #4074 [0]. Sometimes the size is greater than our current limit of 1024, so increase it to 2048. The RFC [1] mentions that there is no limit to the code size, but based on