Bug ID 1493817: Increase access token size limit to 8kb

Last Modified: Aug 26, 2024

Affected Product(s):
BIG-IP APM(all modules)

Known Affected Versions:
15.1.10.2, 15.1.10.3, 15.1.10.4

Opened: Jan 22, 2024

Severity: 3-Major

Symptoms

Error "Assigned access token claims cause claim_data to exceed buffer size limit." on APM due to the size limit of a claim >4k bytes included in the JWT access token. In the browser you see an internal server error. In /var/log/ltm you see err tmm[18827]: 01990004:3: /Common/<virtual server>: Request Auth Code from Source ID (null) IP <IP> failed. Error Code (server_error) Error Description (Assigned access token claims cause claim_data to exceed buffer size limit.)

Impact

APM OAuth AS cannot provide JWT access tokens and not able to reach resources.

Conditions

-- OAuth AS configured -- Generate a token with more number of claims that will be included in token. -- User is in multiple AD groups as a memberof that is used as a claim value, which increases the size limit of token.

Workaround

None

Fix Information

None

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips