Skip to main content

Public

Project privacy set to public. By default, its content is available to everyone (authenticated or not). Please note that more restrictive permissions might exist on some items.

    •  
      request #44855 OIDC connection failed because of too long username
    Actions
    Infos
    #44855
    Aurélien Tisné (atisne)
    2025-10-01 10:37
    2025-09-19 19:23
    46570
    Details
    OIDC connection failed because of too long username

    When connecting using OpenIDConnect, we can received long user name from the remote user repository. For instance, some organizations used to prefix subcontractors' names by the name of their companies.

    So, the name may exceed the unix max limitation of 30 characters.

    We propose that the class UserNameNormalizer ensures that the name don't exceed this limit to avoid a connection failure.

    OAuth2 / OpenID Connect server
    16.11
    Empty
    • [ ] enhancement
    • [ ] internal improvement
    Empty
    Stage
    Empty
    New
    Empty
    Attachments
    Empty
    References
    Referenced by request #44855

    Other

    gerrit #35670
    Display settings

    Follow-ups

    User avatar
    Aurélien Tisné (atisne)2025-10-01 10:37

    I'm not sure the proposed fix is done at the right place. In this location, we should think that the fix is partial. It fixes the use case of this ticket but not all the cases. Maybe, it should rather be done in the openidconnectclient plugin (plugins/openidconnectclient/include/OpenIDConnectClient/Login/Registration/UsernameGenerator.php).

    What's your opinion?