Log a JIRA. We don't have a workaround for this. On 5/4/2015 2:42 PM, Leonardo Loch Zanivan wrote: > Hi, > > I have a big problem here because of bearer token size. > > I'm using keycloak within a SaaS application, so I need create alot of > realms. > > After 30 realms created, the bearer token issued for master admin user > has more than 8kb. > It's huge for a single header, Apache limits 8kb headers by default. > With 1000 realms, the bearer token of master admin user will have 3.5mb. > It'll be impossible to use keycloak in production, it occurs because > "resource_access" property has all realms with all possible roles. > > It's possible to create wildcard "*" for "resource_access" to prevent > that problem? > > > _______________________________________________ > keycloak-dev mailing list > keycloak-dev(a)lists.jboss.org > https://lists.jboss.org/mailman/listinfo/keycloak-dev > -- Bill Burke JBoss, a division of Red Hat http://bill.burkecentral.com _______________________________________________ keycloak-dev mailing list keycloak-dev(a)lists.jboss.org https://lists.jboss.org/mailman/listinfo/keycloak-dev