<div dir="ltr">You can configure what goes into the token. There are two things you can do to reduce the size:<div><br></div><div>* Set the scope of your client to only include the roles the client requires</div><div>* Configure mappers for the client to control what other properties are included in the token</div></div><div class="gmail_extra"><br><div class="gmail_quote">On 5 February 2016 at 10:27, Nangunoori, Srinivas <span dir="ltr"><<a href="mailto:srinivas.nangunoori@hpe.com" target="_blank">srinivas.nangunoori@hpe.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div lang="EN-US" link="blue" vlink="purple">
<div>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d">Thanks for the info. Stian.
<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d">Can we configure size of access_token? If yes, how we can do that.<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d"><u></u> <u></u></span></p>
<p class="MsoNormal"><b><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">From:</span></b><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"> Stian Thorgersen [mailto:<a href="mailto:sthorger@redhat.com" target="_blank">sthorger@redhat.com</a>]
<br>
<b>Sent:</b> Thursday, February 04, 2016 4:27 PM<br>
<b>To:</b> Nangunoori, Srinivas<br>
<b>Cc:</b> <a href="mailto:keycloak-user@lists.jboss.org" target="_blank">keycloak-user@lists.jboss.org</a><br>
<b>Subject:</b> Re: [keycloak-user] Size of keyclaok_access_token<u></u><u></u></span></p><div><div class="h5">
<p class="MsoNormal"><u></u> <u></u></p>
<div>
<p class="MsoNormal">Size of the token depends on what goes into it. What roles, scope you have for users/clients as well as what mappers you have.<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
<div>
<p class="MsoNormal">On 4 February 2016 at 11:24, Nangunoori, Srinivas <<a href="mailto:srinivas.nangunoori@hpe.com" target="_blank">srinivas.nangunoori@hpe.com</a>> wrote:<u></u><u></u></p>
<blockquote style="border:none;border-left:solid #cccccc 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in">
<div>
<div>
<p class="MsoNormal">Hi,<u></u><u></u></p>
<p class="MsoNormal"> <u></u><u></u></p>
<p class="MsoNormal">We are seeing some strange behavior with access token size. Some keycloak servers are generating with 1308 character size and some others are generating with 2055 character size.<u></u><u></u></p>
<p class="MsoNormal">May I know what would be the correct size?<u></u><u></u></p>
<p class="MsoNormal">Environment details,<u></u><u></u></p>
<p class="MsoNormal">Server Version : 1.6.1.Final<u></u><u></u></p>
<p class="MsoNormal">Current working directory: /opt/jboss<u></u><u></u></p>
<p class="MsoNormal">Java Version: 1.7.0_85<u></u><u></u></p>
<p class="MsoNormal">Java Vendor: Oracle Corporation<u></u><u></u></p>
<p class="MsoNormal">Java Runtime: OpenJDK Runtime Environment<u></u><u></u></p>
<p class="MsoNormal">Java VM: OpenJDK 64-Bit Server VM<u></u><u></u></p>
<p class="MsoNormal">Java VM Version: 24.85-b03<u></u><u></u></p>
<p class="MsoNormal">Java Home: /usr/lib/jvm/java-1.7.0-openjdk-1.7.0.85-2.6.1.2.el7_1.x86_64/jre<u></u><u></u></p>
<p class="MsoNormal">System Encoding: ANSI_X3.4-1968<u></u><u></u></p>
<p class="MsoNormal">Operating System: Linux 3.10.0-123.9.3.el7.x86_64<u></u><u></u></p>
<p class="MsoNormal">OS Architecture: amd64<u></u><u></u></p>
<p class="MsoNormal"> <u></u><u></u></p>
<p class="MsoNormal"> <u></u><u></u></p>
<p class="MsoNormal">Regards,<u></u><u></u></p>
<p class="MsoNormal">Srinivas N<u></u><u></u></p>
<p class="MsoNormal">HPE, Bengaluru<u></u><u></u></p>
<p class="MsoNormal"> <u></u><u></u></p>
</div>
</div>
<p class="MsoNormal"><br>
_______________________________________________<br>
keycloak-user mailing list<br>
<a href="mailto:keycloak-user@lists.jboss.org" target="_blank">keycloak-user@lists.jboss.org</a><br>
<a href="https://lists.jboss.org/mailman/listinfo/keycloak-user" target="_blank">https://lists.jboss.org/mailman/listinfo/keycloak-user</a><u></u><u></u></p>
</blockquote>
</div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
</div></div></div>
</div>
</blockquote></div><br></div>