OpenIddict 7.4 persists the full token type identifiers instead of the
short names used by earlier versions. The longest of them,
"urn:openiddict:params:oauth:token-type:authorization_code", needs 57
characters, but the token type column only allows 50, because the pinned
Squidex.OpenIdDict.EntityFramework fork still declares the old length.
Every interactive login therefore failed when the authorization code was
stored, and the user was redirected to the error page:
Msg 2628: String or binary data would be truncated in table
'OpenIddictTokens', column 'Type'.
The client credentials flow was unaffected, because the access token
identifier still fits into 50 characters. MongoDB was unaffected as
well, because it does not enforce a length.
Widen the column to 150 characters, which is the length official
OpenIddict uses for the same reason, and add a migration for all three
relational providers. The new test compares the stored value instead of
only saving it, because MySql truncates silently outside of strict mode.
Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Joe de Ronde
8621906513