These forums have been archived and are now read-only.

The new forums are live and can be found at https://forums.eveonline.com/

EVE Technology Lab

 
  • Topic is locked indefinitely.
 

Running into URI length limit when requesting many CREST auth scopes
Author
Previous Topic Next Topic
Aineko Macx
#1 - 2016-05-01 14:35:08 UTC
Thanks to the many new CREST authentication scopes, one can now easily go over the URI length limit that login-tq.eveonline.com will still process, when requesting an access token via refresh token. The current limit seems to be 2048 characters. I believe this is configurable via large_client_header_buffers in Nginx.

iveeCore 3.0: The PHP engine for industrial activities and CREST library
Carbon Alabel
Gemini Talon
The Curatores Veritatis Auxiliary
#2 - 2016-05-01 15:28:39 UTC
It's a known problem and someone is working on fixing it.

However, there is no reason to go over the length limit when requesting an access token using the refresh token as you only need to include the scopes when the user is first authenticated.

Also, SSO isn't running on nginx.
Aineko Macx
#3 - 2016-05-01 16:17:45 UTC
Yes, I meant to say "when getting a refresh token".

iveeCore 3.0: The PHP engine for industrial activities and CREST library