From 17dc482872cf62e12965f6207772c83d1deb651b Mon Sep 17 00:00:00 2001
From: Trenton H <797416+stumpylog@users.noreply.github.com>
Date: Sat, 8 Aug 2026 12:51:27 -0700
Subject: [PATCH] Fix: Allow DRF to validate the maximum API key length
 (#13614)

---
 src/paperless/serialisers.py | 1 +
 1 file changed, 1 insertion(+)

diff --git a/src/paperless/serialisers.py b/src/paperless/serialisers.py
index 58702b726..173de8153 100644
--- a/src/paperless/serialisers.py
+++ b/src/paperless/serialisers.py
@@ -217,6 +217,7 @@ class ApplicationConfigurationSerializer(
     llm_api_key = ObfuscatedPasswordField(
         required=False,
         allow_null=True,
+        max_length=1024,
     )
 
     def run_validation(self, data):