Fix refresh token max length

Author: Richard O'Dwyer

oauth2_provider/migrations/0013_alter_refreshtoken_token.py

@@ -0,0 +1,17 @@
+# Generated by Django 5.1.2 on 2025-10-12 00:00
+
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+    dependencies = [
+        ("oauth2_provider", "0012_add_token_checksum"),
+    ]
+
+    operations = [
+        migrations.AlterField(
+            model_name="refreshtoken",
+            name="token",
+            field=models.CharField(max_length=8000),
+        ),
+    ]

oauth2_provider/models.py

@@ -501,7 +501,7 @@ class AbstractRefreshToken(models.Model):
     user = models.ForeignKey(
         settings.AUTH_USER_MODEL, on_delete=models.CASCADE, related_name="%(app_label)s_%(class)s"
     )
-    token = models.CharField(max_length=255)
+    token = models.CharField(max_length=8000)
     application = models.ForeignKey(oauth2_settings.APPLICATION_MODEL, on_delete=models.CASCADE)
     access_token = models.OneToOneField(
         oauth2_settings.ACCESS_TOKEN_MODEL,