Jira Cloud API Tokens length validations

[SaurabhRewaskar]

Hey Jira support,

Wanted to understand the length constraints on Jira cloud API Tokens. I see here Manage API tokens for your Atlassian account | Atlassian Support that variable length API tokens can be generated from Jira cloud. Is there a maximum character length however thats implemented?

Wanted to specifically understand the member constraints for refresh_token and access_tokens lengths. Currently I have refresh_tokens max char value set at 2048 characters but looks like refresh_tokens can exceed that length.

Can you provide what the maximum char length this parameter can emit, so I can have member constraints on my end.

[ibuchanan]

@SaurabhRewaskar welcome to the Atlassian developer community.

The short answer is no, there isn’t a maximum char length. For a little more detail, see my prior post:

About the format of Atlassian security tokens

Recently, @GuilhermeBueno and I worked a support case about the OAuth 2.0 authorization code exchange. The first step of the flow in OAuth 2.0 (3LO) apps is retrieving the authorization code by directing the user to the authorization URL. The authorization code is returned as a parameter in the URL. The OAuth 2.0 specification does not specify how that authorization code is formatted or what size it should be. In our case, the reporter noted the authorization code from Atlassian was once return…

[SaurabhRewaskar]

Hey Ian, thanks for the prompt reply

So there’s no range or anything that we can expect this token to lie within? I see one user post saying that the refresh token was around 16k chars…
And you expect clients to not have any validations based on the token length?

[ibuchanan]

@SaurabhRewaskar

So there’s no range or anything that we can expect this token to lie within?

I confirm there is no specified range.

@SaurabhRewaskar

And you expect clients to not have any validations based on the token length?

I confirm Atlassian does not expect clients to validate based on token length.

[SaurabhRewaskar]

Sounds good. Thankyou for the confirmations