Forum Discussion
yoelh
Mar 17, 2023Microsoft
Azure AD B2C authorization code and refresh token size increase update
Update September 11, 2023: This post is irrelevant anymore
As part of ongoing security improvement efforts in Azure Active Directory (AAD), part of Microsoft Entra, Azure AD B2C will be rolling...
josequintino
Apr 19, 2023Iron Contributor
Hi yoelh. As part of ongoing security improvement efforts in Azure Active Directory (AAD), part of Microsoft Identity Platform, Azure AD B2C is rolling out a format change that increases the size of OAuth 2.0 (and OpenID Connect) authorization code and refresh tokens. This change may impact applications that use Azure AD B2C if they have size limitations for storing tokens. The general recommendation is to ensure that applications are prepared to handle larger tokens. To address this change, follow these steps: Ensure that your application can handle larger authorization and refresh tokens. The exact size may vary, but it's important that the application can handle tokens significantly larger than the current ones. Update your application, if necessary, to support larger tokens. Test your application to ensure it works correctly with larger tokens. Consider testing in a development or test environment before deploying the changes to the production environment. Microsoft usually provides notices and detailed information about these changes before implementing them. Therefore, it's important to stay updated with Microsoft announcements and update your applications accordingly.