diff --git a/pkg/internal/web/server.go b/pkg/internal/web/server.go
index 9719f0e..baece04 100644
--- a/pkg/internal/web/server.go
+++ b/pkg/internal/web/server.go
@@ -29,6 +29,7 @@ func NewServer() *WebApp {
 		JSONEncoder:           json.Marshal,
 		JSONDecoder:           json.Unmarshal,
 		BodyLimit:             512 * 1024 * 1024 * 1024, // 512 TiB
+		ReadBufferSize:        5 * 1024 * 1024,          // 5MB for large JWT
 		EnablePrintRoutes:     viper.GetBool("debug.print_routes"),
 	})