squidex

Headless CMS and Content Managment Hub

csharp asp-net asp-net-core cms headless-cms mongodb

Joe de Ronde 8621906513 Fix interactive login on SQL databases by widening the token type OpenIddict 7.4 persists the full token type identifiers instead of the short names used by earlier versions. The longest of them, "urn:openiddict:params:oauth:token-type:authorization_code", needs 57 characters, but the token type column only allows 50, because the pinned Squidex.OpenIdDict.EntityFramework fork still declares the old length. Every interactive login therefore failed when the authorization code was stored, and the user was redirected to the error page: Msg 2628: String or binary data would be truncated in table 'OpenIddictTokens', column 'Type'. The client credentials flow was unaffected, because the access token identifier still fits into 50 characters. MongoDB was unaffected as well, because it does not enforce a length. Widen the column to 150 characters, which is the length official OpenIddict uses for the same reason, and add a migration for all three relational providers. The new test compares the stored value instead of only saving it, because MySql truncates silently outside of strict mode. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>	4 weeks ago
..
EFOpenIddictTests.cs	Fix interactive login on SQL databases by widening the token type	4 weeks ago

Joe de Ronde 8621906513 Fix interactive login on SQL databases by widening the token type

OpenIddict 7.4 persists the full token type identifiers instead of the
short names used by earlier versions. The longest of them,
"urn:openiddict:params:oauth:token-type:authorization_code", needs 57
characters, but the token type column only allows 50, because the pinned
Squidex.OpenIdDict.EntityFramework fork still declares the old length.

Every interactive login therefore failed when the authorization code was
stored, and the user was redirected to the error page:

    Msg 2628: String or binary data would be truncated in table
    'OpenIddictTokens', column 'Type'.

The client credentials flow was unaffected, because the access token
identifier still fits into 50 characters. MongoDB was unaffected as
well, because it does not enforce a length.

Widen the column to 150 characters, which is the length official
OpenIddict uses for the same reason, and add a migration for all three
relational providers. The new test compares the stored value instead of
only saving it, because MySql truncates silently outside of strict mode.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

4 weeks ago

EFOpenIddictTests.cs

Fix interactive login on SQL databases by widening the token type

4 weeks ago