search

azure-ad-b2c / samples

Azure AD B2C custom policy solutions and samples.
846 stars 598 forks source link

Azure B2C identity provider increased the length of their generated authorization codes #598

Open ramon-tomas-c opened 11 months ago

ramon-tomas-c commented 11 months ago

The Azure B2C identity provider recently increased the length of their generated authorization codes, those codes are used as a query parameter for OIDC flows.

We currently have a SPA app hosted on Azure static web apps. This new changes cause the static web app to return a Not found resource exception when it is redirected during the auth flow as the query string length reached the maximum allowed by the static web app (4096).

Is there a way to limit the length of the generated auth codes?

Thanks.

JasSuri commented 7 months ago

There were security reasons which led to the authz code size to increase. It cannot be limited.