matrix-org / matrix-org/thirdroom

Keycloak bearer tokens issued for thirdroom.io are enormous

Open
#168 2 comments 0 reactions 0 assignees View on GitHub
bug Identity / Auth
Dominant language
C
Stars
647
Forks
70
PR merge metrics
No merged PRs in 30d

Description

My access token in an OIDC world with KC has ended up being 1743 bytes long (of base64). This is crazy long, especially given how many requests Matrix does, and especially given we finally stripped down the size of access_tokens in synapse to be something sensible in https://github.com/matrix-org/synapse/pull/5588, inspired by https://github.blog/2021-04-05-behind-githubs-new-authentication-token-formats/

Contributor guide

Open the contributing guide

Research direction

No files, tests, or entry points are named in the issue. Start by locating how Keycloak issues bearer tokens for thirdroom.io and how Matrix requests consume them; done means the token size is reduced without breaking authentication.

Written by the indexing model from the issue text.

Assessment

Domain
authentication
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.