String or binary data would be truncated in table 'SamlLogoutSessions', column 'LogoutId'

[oyvindn]

When IdentityServer stores the SamlLogoutSession in the database during SAML SLO, the LogoutId (a protected version of LogoutMessage, using ProtectedDataMessageStore) becomes larger than the database column can hold (HasMaxLength(200)), resulting in a truncation error.

[14:31:22 WRN] exception storing SAML logout session CfDJ8MhuXdoVyxJJiMhZvgE3ZldFvhFuNKJV3_xisjY3TBo7biWbtKyAzFHDoW1NyISw8PkyDFs_X3OSEedpijFdH8xNB1RdntkYw72EEERNErljChHCyJ0-0LkG7zS8t8KyLCxpdUitVueBjvgLUR-3A4cco2uZLz3wxr4N-zAGvSWyrX0NfBNaILs0tTWLNIFc1jmq-boSwQuvEO7LzR53s21P4zAGiycesqS0GjusgtCpLKzdC2AZ9WFLCka5VuRwjs9iCUo09YI4WwgBMtFShvYpIJPt43uCWn7Ijplh0AIEqjMzBYPefmKochH6RsVEXv03ZJqUAP5JKOu433YtxT_oBlMD3kFXUJH0gSIM7jGmnGs7566MDZcPPQhpURYDrgc6Sd7BdGJfiKJIyxUVOg0GFoU85VHlAmAviNI73G3JcOhcX5v-j3w5wZJKFyiLdQ2lhSitFvAXqRxjaYd30Xlu82YIZa1pv_eDOM8b_yvHG6N-PCiOyXtJWw3A6RoAp6TOQryI8KzZFoUt5FoCxtCcurpAVRAJ7XW32OTkGioYTuFPcTalckenlXAUObj_SCw35CU0eqrM6rMW3LVWu5ARxp36fDptIM7KpKch29MBJMuJS5Cyc3nGZIArEGSHL10xEZbdp6w-ssqN23GlVaA-pvEAUrE5E3rhYBbFoqMZs2_q1Ah_PlZOBrSg2kaYZSSljNRaqjrloMDygLowgosfUL7X0gEoStazkzakqUWB84fsKqNuMBTV8fJB1QUKJKRJDU14qQC5bLIWV1-XDeIqFYadbbH436D3sFNwIV9WHLt9QWkmdZ7spO3nZHW66QeItQSP4C2Rqjpmf5w45NOH0LXubgvUfjz7Xfj7rg1BZGQPOfiIB_F3Sx0x8dVhUPiZ1JHz8aTlkWvrnVtNI2M51g5m8AYXmO3z1LHp-0jmlWUMP3AAQbM5Q5y-Lq_lSw in database: An error occurred while saving the entity changes. See the inner exception for details.
[14:31:22 FTL] Unhandled exception: An error occurred while saving the entity changes. See the inner exception for details.
Microsoft.EntityFrameworkCore.DbUpdateException: An error occurred while saving the entity changes. See the inner exception for details.
 ---> Microsoft.Data.SqlClient.SqlException (0x80131904): String or binary data would be truncated in table 'local.dbo.SamlLogoutSessions', column 'LogoutId'. Truncated value: 'CfDJ8MhuXdoVyxJJiMhZvgE3ZldFvhFuNKJV3_xisjY3TBo7biWbtKyAzFHDoW1NyISw8PkyDFs_X3OSEedpijFdH8xNB1RdntkY'.
   at Microsoft.Data.SqlClient.SqlConnection.OnError(SqlException exception, Boolean breakConnection, Action`1 wrapCloseInAction)
   at Microsoft.Data.SqlClient.Connection.SqlConnectionInternal.OnError(SqlException exception, Boolean breakConnection, Action`1 wrapCloseInAction)
   at Microsoft.Data.SqlClient.TdsParser.ThrowExceptionAndWarning(TdsParserStateObject stateObj, SqlCommand command, Boolean callerHasConnectionLock, Boolean asyncClose)
   at Microsoft.Data.SqlClient.TdsParser.TryRun(RunBehavior runBehavior, SqlCommand cmdHandler, SqlDataReader dataStream, BulkCopySimpleResultSet bulkCopyHandler, TdsParserStateObject stateObj, Boolean& dataReady)
   at Microsoft.Data.SqlClient.SqlDataReader.TryHasMoreRows(Boolean& moreRows)
   at Microsoft.Data.SqlClient.SqlDataReader.TryReadInternal(Boolean setTimeout, Boolean& more)
   at Microsoft.Data.SqlClient.SqlDataReader.ReadAsyncExecute(Task task, Object state)
   at Microsoft.Data.SqlClient.SqlDataReader.InvokeAsyncCall[T](SqlDataReaderBaseAsyncCallContext`1 context)
--- End of stack trace from previous location ---
   at Microsoft.EntityFrameworkCore.Update.AffectedCountModificationCommandBatch.ConsumeResultSetAsync(Int32 startCommandIndex, RelationalDataReader reader, CancellationToken cancellationToken)
ClientConnectionId:d27c34d7-ea4a-43c2-986b-3f6e80f6f04c
Error Number:2628,State:1,Class:16
   --- End of inner exception stack trace ---
   at Microsoft.EntityFrameworkCore.Update.AffectedCountModificationCommandBatch.ConsumeResultSetAsync(Int32 startCommandIndex, RelationalDataReader reader, CancellationToken cancellationToken)
   at Microsoft.EntityFrameworkCore.Update.AffectedCountModificationCommandBatch.ConsumeAsync(RelationalDataReader reader, CancellationToken cancellationToken)
   at Microsoft.EntityFrameworkCore.Update.ReaderModificationCommandBatch.ExecuteAsync(IRelationalConnection connection, CancellationToken cancellationToken)
   at Microsoft.EntityFrameworkCore.Update.ReaderModificationCommandBatch.ExecuteAsync(IRelationalConnection connection, CancellationToken cancellationToken)
   at Microsoft.EntityFrameworkCore.SqlServer.Update.Internal.SqlServerModificationCommandBatch.ExecuteAsync(IRelationalConnection connection, CancellationToken cancellationToken)
   at Microsoft.EntityFrameworkCore.Update.Internal.BatchExecutor.ExecuteAsync(IEnumerable`1 commandBatches, IRelationalConnection connection, CancellationToken cancellationToken)
   at Microsoft.EntityFrameworkCore.Update.Internal.BatchExecutor.ExecuteAsync(IEnumerable`1 commandBatches, IRelationalConnection connection, CancellationToken cancellationToken)
   at Microsoft.EntityFrameworkCore.Update.Internal.BatchExecutor.ExecuteAsync(IEnumerable`1 commandBatches, IRelationalConnection connection, CancellationToken cancellationToken)
   at Microsoft.EntityFrameworkCore.Storage.RelationalDatabase.SaveChangesAsync(IList`1 entries, CancellationToken cancellationToken)
   at Microsoft.EntityFrameworkCore.ChangeTracking.Internal.StateManager.SaveChangesAsync(IList`1 entriesToSave, CancellationToken cancellationToken)
   at Microsoft.EntityFrameworkCore.ChangeTracking.Internal.StateManager.SaveChangesAsync(StateManager stateManager, Boolean acceptAllChangesOnSuccess, CancellationToken cancellationToken)
   at Microsoft.EntityFrameworkCore.Storage.ExecutionStrategy.<>c__DisplayClass30_0`2.<<ExecuteAsync>b__0>d.MoveNext()
--- End of stack trace from previous location ---
   at Microsoft.EntityFrameworkCore.Storage.ExecutionStrategy.ExecuteImplementationAsync[TState,TResult](Func`4 operation, Func`4 verifySucceeded, TState state, CancellationToken cancellationToken)
   at Microsoft.EntityFrameworkCore.Storage.ExecutionStrategy.ExecuteImplementationAsync[TState,TResult](Func`4 operation, Func`4 verifySucceeded, TState state, CancellationToken cancellationToken)
   at Microsoft.EntityFrameworkCore.Storage.ExecutionStrategy.ExecuteAsync[TState,TResult](TState state, Func`4 operation, Func`4 verifySucceeded, CancellationToken cancellationToken)
   at Microsoft.EntityFrameworkCore.DbContext.SaveChangesAsync(Boolean acceptAllChangesOnSuccess, CancellationToken cancellationToken)
   at Microsoft.EntityFrameworkCore.DbContext.SaveChangesAsync(Boolean acceptAllChangesOnSuccess, CancellationToken cancellationToken)
   at Duende.IdentityServer.EntityFramework.Stores.SamlLogoutSessionStore.StoreAsync(SamlLogoutSession session, CancellationToken ct) in /_/identity-server/src/EntityFramework.Storage/Stores/SamlLogoutSessionStore.cs:line 62
   at Duende.IdentityServer.Validation.EndSessionRequestValidator.ValidateCallbackAsync(NameValueCollection parameters, CancellationToken ct) in /_/identity-server/src/IdentityServer/Validation/Default/EndSessionRequestValidator.cs:line 378
   at Duende.IdentityServer.Endpoints.EndSessionCallbackEndpoint.ProcessAsync(HttpContext context) in /_/identity-server/src/IdentityServer/Endpoints/EndSessionCallbackEndpoint.cs:line 41
   at Duende.IdentityServer.Hosting.IdentityServerMiddleware.Invoke(HttpContext context, IdentityServerOptions options, IEndpointRouter router, IUserSession userSession, IEventService events, IIssuerNameService issuerNameService, ISessionCoordinationService sessionCoordinationService) in /_/identity-server/src/IdentityServer/Hosting/IdentityServerMiddleware.cs:line 109

[wcabus]

Hey @oyvindn , thanks for reporting this! We're aiming to release a fix for this issue soon.

[wcabus]

@oyvindn Duende IdentityServer v8.0.8 has been released which contains a fix for this issue. There's no database migration involved whatsoever with this patch, so you should be good to update to this release.