Oauth2 token size

1,049 views
Skip to first unread message

Kenneth Feldt

unread,
Jul 2, 2016, 9:25:45 AM7/2/16
to Canvas LMS Users
We are deciding where to keep the OAuth2 access tokens --- but apparently there is no size specification for access tokens; dialog on Facebook groups hint that tokens may exceed 255 characters for their applications.
a) Am I correct in assuming that canvas/LMS does not define a max size for access tokens
b) How about 'refresh tokens' - is there a defined field length for refresh tokens?

Cody Cutrer

unread,
Jul 7, 2016, 7:05:25 PM7/7/16
to canvas-l...@googlegroups.com
Kenneth,

Canvas access and refresh tokens have a random component, and a deterministic component (the latter specific to Canvas Cloud). The random component will always be 64 characters. The deterministic component is always at least two characters, and is an incrementing integer (current maximum in the system is 6 characters). I'd say just give yourself 255 characters and call it good.

Cody Cutrer
Software Engineer
Instructure

--

---
You received this message because you are subscribed to the Google Groups "Canvas LMS Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to canvas-lms-use...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Kenneth Feldt

unread,
Jul 8, 2016, 1:10:57 PM7/8/16
to Canvas LMS Users
Thank you!
Reply all
Reply to author
Forward
0 new messages