keycloak/keycloak
Internal server error on login form submission with oversized input
クローズ
#47,802 opened on 2026/04/07
area/login/uihelp wantedkind/bugpriority/lowstatus/auto-bumpstatus/auto-expireteam/core-authnteam/core-clients
Repository metrics
- Stars
- (34,398 個のスター)
- PR merge metrics
- (平均マージ 6d 19h) (30d で 384 merged PRs)
説明
Before reporting an issue
- I have read and understood the above terms for submitting issues, and I understand that my issue may be closed without action if I do not follow them.
Area
login/ui
Describe the bug
When a user submits input in the login form that significantly exceeds the expected length, the Keycloak server responds with an internal server error.
Version
26.4.0
Regression
- The issue is a regression
Expected behavior
The UI should handle this response the same way it handles incorrect username or password input — displaying an appropriate error message in the login form without crashing or returning an unhandled server error.
Actual behavior
When a user submits input in the login form that significantly exceeds the expected length, the UI shows an internal server error page.
How to Reproduce?
Open the login form and use 500KB random text as either username or password. On submit the internal server error message is shown.
Anything else?
No response