Uploaded image for project: 'JBoss Enterprise Application Platform'
  1. JBoss Enterprise Application Platform
  2. JBEAP-23365

MP JWT return 500 instead of 401.

    XMLWordPrintable

Details

    Description

      Description

      MP JWT return 500 instead of 401.

      This issue is valid for WF from main branch. This is a regression against EAP XP 4.

      Most likely the wrong detection is here. Or the exception that is checked is generated wrongly. See the stack traces from the following sections.

      Scenario details

      A JWT signed by a "pink" private key is send to the server which has configured public key to be a JSON Web Key set in JSON. There are multiple keys in this set and there is no "pink" public key among them.

      JWt should be rejected and user should receive 401/forbidden because there is no matching configured public key on the server.

      Smallrye version details

      • XP4
        • Smallrye JWT 3.0.0
      • WF main
        • Smallrye JWT 3.1.1

      Steps to reproduce:

      This can be also reproduced by MP TS:

      Results from current WF main branch

      11:58:37,890 ERROR [stderr] (default task-1) io.smallrye.jwt.auth.principal.ParseException: SRJWT07000: Failed to verify a token
11:58:37,892 ERROR [stderr] (default task-1) 	at io.smallrye.jwt//io.smallrye.jwt.auth.principal.DefaultJWTTokenParser.parseClaims(DefaultJWTTokenParser.java:157)
11:58:37,894 ERROR [stderr] (default task-1) 	at io.smallrye.jwt//io.smallrye.jwt.auth.principal.DefaultJWTTokenParser.parse(DefaultJWTTokenParser.java:56)
11:58:37,898 ERROR [stderr] (default task-1) 	at io.smallrye.jwt//io.smallrye.jwt.auth.principal.DefaultJWTCallerPrincipalFactory.parse(DefaultJWTCallerPrincipalFactory.java:31)
11:58:37,901 ERROR [stderr] (default task-1) 	at io.smallrye.jwt//io.smallrye.jwt.auth.principal.DefaultJWTParser.parse(DefaultJWTParser.java:60)
11:58:37,904 ERROR [stderr] (default task-1) 	at io.smallrye.jwt//io.smallrye.jwt.auth.principal.DefaultJWTParser$Proxy$_$$_WeldClientProxy.parse(Unknown Source)
11:58:37,907 ERROR [stderr] (default task-1) 	at io.smallrye.jwt//io.smallrye.jwt.auth.mechanism.JWTHttpAuthenticationMechanism.validateRequest(JWTHttpAuthenticationMechanism.java:78)
11:58:37,908 ERROR [stderr] (default task-1) 	at io.smallrye.jwt//io.smallrye.jwt.auth.mechanism.JWTHttpAuthenticationMechanism$Proxy$_$$_WeldClientProxy.validateRequest(Unknown Source)
11:58:37,910 ERROR [stderr] (default task-1) 	at org.glassfish.soteria@1.0.1-jbossorg-1//org.glassfish.soteria.mechanisms.jaspic.HttpBridgeServerAuthModule.validateRequest(HttpBridgeServerAuthModule.java:90)
11:58:37,911 ERROR [stderr] (default task-1) 	at org.glassfish.soteria@1.0.1-jbossorg-1//org.glassfish.soteria.mechanisms.jaspic.DefaultServerAuthContext.validateRequest(DefaultServerAuthContext.java:53)
11:58:37,912 ERROR [stderr] (default task-1) 	at org.wildfly.security.elytron-web.undertow-server-servlet@2.0.0.Beta2//org.wildfly.elytron.web.undertow.server.servlet.ServletSecurityContextImpl.authenticate(ServletSecurityContextImpl.java:183)
11:58:37,914 ERROR [stderr] (default task-1) 	at org.wildfly.security.elytron-web.undertow-server-servlet@2.0.0.Beta2//org.wildfly.elytron.web.undertow.server.servlet.ServletSecurityContextImpl.authenticate(ServletSecurityContextImpl.java:100)
11:58:37,915 ERROR [stderr] (default task-1) 	at io.undertow.servlet@2.2.16.Final//io.undertow.servlet.handlers.security.ServletAuthenticationCallHandler.handleRequest(ServletAuthenticationCallHandler.java:55)
11:58:37,916 ERROR [stderr] (default task-1) 	at io.undertow.core@2.2.16.Final//io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43)
11:58:37,917 ERROR [stderr] (default task-1) 	at io.undertow.core@2.2.16.Final//io.undertow.security.handlers.AbstractConfidentialityHandler.handleRequest(AbstractConfidentialityHandler.java:46)
11:58:37,919 ERROR [stderr] (default task-1) 	at io.undertow.servlet@2.2.16.Final//io.undertow.servlet.handlers.security.ServletConfidentialityConstraintHandler.handleRequest(ServletConfidentialityConstraintHandler.java:64)
11:58:37,920 ERROR [stderr] (default task-1) 	at io.undertow.core@2.2.16.Final//io.undertow.security.handlers.AbstractSecurityContextAssociationHandler.handleRequest(AbstractSecurityContextAssociationHandler.java:43)
11:58:37,920 ERROR [stderr] (default task-1) 	at org.wildfly.security.elytron-web.undertow-server-servlet@2.0.0.Beta2//org.wildfly.elytron.web.undertow.server.servlet.CleanUpHandler.handleRequest(CleanUpHandler.java:38)
11:58:37,921 ERROR [stderr] (default task-1) 	at io.undertow.core@2.2.16.Final//io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43)
11:58:37,922 ERROR [stderr] (default task-1) 	at org.wildfly.extension.undertow@27.0.0.Beta1-SNAPSHOT//org.wildfly.extension.undertow.security.jacc.JACCContextIdHandler.handleRequest(JACCContextIdHandler.java:61)
11:58:37,923 ERROR [stderr] (default task-1) 	at io.undertow.core@2.2.16.Final//io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43)
11:58:37,924 ERROR [stderr] (default task-1) 	at org.wildfly.extension.undertow@27.0.0.Beta1-SNAPSHOT//org.wildfly.extension.undertow.deployment.GlobalRequestControllerHandler.handleRequest(GlobalRequestControllerHandler.java:68)
11:58:37,925 ERROR [stderr] (default task-1) 	at io.undertow.servlet@2.2.16.Final//io.undertow.servlet.handlers.SendErrorPageHandler.handleRequest(SendErrorPageHandler.java:52)
11:58:37,926 ERROR [stderr] (default task-1) 	at io.undertow.core@2.2.16.Final//io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43)
11:58:37,927 ERROR [stderr] (default task-1) 	at io.undertow.servlet@2.2.16.Final//io.undertow.servlet.handlers.ServletInitialHandler.handleFirstRequest(ServletInitialHandler.java:275)
11:58:37,929 ERROR [stderr] (default task-1) 	at io.undertow.servlet@2.2.16.Final//io.undertow.servlet.handlers.ServletInitialHandler.access$100(ServletInitialHandler.java:79)
11:58:37,930 ERROR [stderr] (default task-1) 	at io.undertow.servlet@2.2.16.Final//io.undertow.servlet.handlers.ServletInitialHandler$2.call(ServletInitialHandler.java:134)
11:58:37,931 ERROR [stderr] (default task-1) 	at io.undertow.servlet@2.2.16.Final//io.undertow.servlet.handlers.ServletInitialHandler$2.call(ServletInitialHandler.java:131)
11:58:37,932 ERROR [stderr] (default task-1) 	at io.undertow.servlet@2.2.16.Final//io.undertow.servlet.core.ServletRequestContextThreadSetupAction$1.call(ServletRequestContextThreadSetupAction.java:48)
11:58:37,934 ERROR [stderr] (default task-1) 	at io.undertow.servlet@2.2.16.Final//io.undertow.servlet.core.ContextClassLoaderSetupAction$1.call(ContextClassLoaderSetupAction.java:43)
11:58:37,935 ERROR [stderr] (default task-1) 	at org.wildfly.extension.undertow@27.0.0.Beta1-SNAPSHOT//org.wildfly.extension.undertow.deployment.UndertowDeploymentInfoService$UndertowThreadSetupAction.lambda$create$0(UndertowDeploymentInfoService.java:1431)
11:58:37,936 ERROR [stderr] (default task-1) 	at org.wildfly.extension.undertow@27.0.0.Beta1-SNAPSHOT//org.wildfly.extension.undertow.deployment.UndertowDeploymentInfoService$UndertowThreadSetupAction.lambda$create$0(UndertowDeploymentInfoService.java:1431)
11:58:37,937 ERROR [stderr] (default task-1) 	at org.wildfly.extension.undertow@27.0.0.Beta1-SNAPSHOT//org.wildfly.extension.undertow.deployment.UndertowDeploymentInfoService$UndertowThreadSetupAction.lambda$create$0(UndertowDeploymentInfoService.java:1431)
11:58:37,938 ERROR [stderr] (default task-1) 	at org.wildfly.extension.undertow@27.0.0.Beta1-SNAPSHOT//org.wildfly.extension.undertow.deployment.UndertowDeploymentInfoService$UndertowThreadSetupAction.lambda$create$0(UndertowDeploymentInfoService.java:1431)
11:58:37,939 ERROR [stderr] (default task-1) 	at io.undertow.servlet@2.2.16.Final//io.undertow.servlet.handlers.ServletInitialHandler.dispatchRequest(ServletInitialHandler.java:255)
11:58:37,940 ERROR [stderr] (default task-1) 	at io.undertow.servlet@2.2.16.Final//io.undertow.servlet.handlers.ServletInitialHandler.access$000(ServletInitialHandler.java:79)
11:58:37,941 ERROR [stderr] (default task-1) 	at io.undertow.servlet@2.2.16.Final//io.undertow.servlet.handlers.ServletInitialHandler$1.handleRequest(ServletInitialHandler.java:100)
11:58:37,942 ERROR [stderr] (default task-1) 	at io.undertow.core@2.2.16.Final//io.undertow.server.Connectors.executeRootHandler(Connectors.java:387)
11:58:37,943 ERROR [stderr] (default task-1) 	at io.undertow.core@2.2.16.Final//io.undertow.server.HttpServerExchange$1.run(HttpServerExchange.java:852)
11:58:37,944 ERROR [stderr] (default task-1) 	at org.jboss.threads@2.4.0.Final//org.jboss.threads.ContextClassLoaderSavingRunnable.run(ContextClassLoaderSavingRunnable.java:35)
11:58:37,945 ERROR [stderr] (default task-1) 	at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor.safeRun(EnhancedQueueExecutor.java:1990)
11:58:37,946 ERROR [stderr] (default task-1) 	at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor$ThreadBody.doRunTask(EnhancedQueueExecutor.java:1486)
11:58:37,948 ERROR [stderr] (default task-1) 	at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor$ThreadBody.run(EnhancedQueueExecutor.java:1348)
11:58:37,950 ERROR [stderr] (default task-1) 	at org.jboss.xnio@3.8.6.Final//org.xnio.XnioWorker$WorkerThreadFactory$1$1.run(XnioWorker.java:1280)
11:58:37,952 ERROR [stderr] (default task-1) 	at java.base/java.lang.Thread.run(Thread.java:829)
11:58:37,953 ERROR [stderr] (default task-1) Caused by: org.jose4j.lang.UnresolvableKeyException: SRJWT07004: Failed to load a key from the key content while resolving
11:58:37,954 ERROR [stderr] (default task-1) 	at io.smallrye.jwt//io.smallrye.jwt.auth.principal.AbstractKeyLocationResolver.reportUnresolvableKeyException(AbstractKeyLocationResolver.java:187)
11:58:37,956 ERROR [stderr] (default task-1) 	at io.smallrye.jwt//io.smallrye.jwt.auth.principal.KeyLocationResolver.resolveKey(KeyLocationResolver.java:66)
11:58:37,957 ERROR [stderr] (default task-1) 	at org.bitbucket.jose4j//org.jose4j.jwt.consumer.JwtConsumer.processContext(JwtConsumer.java:213)
11:58:37,958 ERROR [stderr] (default task-1) 	at org.bitbucket.jose4j//org.jose4j.jwt.consumer.JwtConsumer.process(JwtConsumer.java:426)
11:58:37,960 ERROR [stderr] (default task-1) 	at io.smallrye.jwt//io.smallrye.jwt.auth.principal.DefaultJWTTokenParser.parseClaims(DefaultJWTTokenParser.java:141)
11:58:37,961 ERROR [stderr] (default task-1) 	... 43 more

      Results from EAP XP4

      12:13:45,839 ERROR [stderr] (default task-1) io.smallrye.jwt.auth.principal.ParseException: SRJWT07000: Failed to verify a token
12:13:45,842 ERROR [stderr] (default task-1) 	at io.smallrye.jwt@3.0.0.redhat-00001//io.smallrye.jwt.auth.principal.DefaultJWTTokenParser.parseClaims(DefaultJWTTokenParser.java:156)
12:13:45,843 ERROR [stderr] (default task-1) 	at io.smallrye.jwt@3.0.0.redhat-00001//io.smallrye.jwt.auth.principal.DefaultJWTTokenParser.parse(DefaultJWTTokenParser.java:56)
12:13:45,845 ERROR [stderr] (default task-1) 	at io.smallrye.jwt@3.0.0.redhat-00001//io.smallrye.jwt.auth.principal.DefaultJWTCallerPrincipalFactory.parse(DefaultJWTCallerPrincipalFactory.java:31)
12:13:45,847 ERROR [stderr] (default task-1) 	at io.smallrye.jwt@3.0.0.redhat-00001//io.smallrye.jwt.auth.principal.DefaultJWTParser.parse(DefaultJWTParser.java:60)
12:13:45,850 ERROR [stderr] (default task-1) 	at io.smallrye.jwt@3.0.0.redhat-00001//io.smallrye.jwt.auth.principal.DefaultJWTParser$Proxy$_$$_WeldClientProxy.parse(Unknown Source)
12:13:45,853 ERROR [stderr] (default task-1) 	at io.smallrye.jwt@3.0.0.redhat-00001//io.smallrye.jwt.auth.mechanism.JWTHttpAuthenticationMechanism.validateRequest(JWTHttpAuthenticationMechanism.java:78)
12:13:45,855 ERROR [stderr] (default task-1) 	at io.smallrye.jwt@3.0.0.redhat-00001//io.smallrye.jwt.auth.mechanism.JWTHttpAuthenticationMechanism$Proxy$_$$_WeldClientProxy.validateRequest(Unknown Source)
12:13:45,857 ERROR [stderr] (default task-1) 	at org.glassfish.soteria@1.0.1.redhat-00002//org.glassfish.soteria.mechanisms.jaspic.HttpBridgeServerAuthModule.validateRequest(HttpBridgeServerAuthModule.java:90)
12:13:45,859 ERROR [stderr] (default task-1) 	at org.glassfish.soteria@1.0.1.redhat-00002//org.glassfish.soteria.mechanisms.jaspic.DefaultServerAuthContext.validateRequest(DefaultServerAuthContext.java:53)
12:13:45,860 ERROR [stderr] (default task-1) 	at org.wildfly.security.elytron-web.undertow-server-servlet@1.9.2.Final-redhat-00001//org.wildfly.elytron.web.undertow.server.servlet.ServletSecurityContextImpl.authenticate(ServletSecurityContextImpl.java:182)
12:13:45,862 ERROR [stderr] (default task-1) 	at org.wildfly.security.elytron-web.undertow-server-servlet@1.9.2.Final-redhat-00001//org.wildfly.elytron.web.undertow.server.servlet.ServletSecurityContextImpl.authenticate(ServletSecurityContextImpl.java:99)
12:13:45,863 ERROR [stderr] (default task-1) 	at io.undertow.servlet@2.2.13.SP2-redhat-00001//io.undertow.servlet.handlers.security.ServletAuthenticationCallHandler.handleRequest(ServletAuthenticationCallHandler.java:55)
12:13:45,865 ERROR [stderr] (default task-1) 	at io.undertow.core@2.2.13.SP2-redhat-00001//io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43)
12:13:45,867 ERROR [stderr] (default task-1) 	at io.undertow.core@2.2.13.SP2-redhat-00001//io.undertow.security.handlers.AbstractConfidentialityHandler.handleRequest(AbstractConfidentialityHandler.java:46)
12:13:45,870 ERROR [stderr] (default task-1) 	at io.undertow.servlet@2.2.13.SP2-redhat-00001//io.undertow.servlet.handlers.security.ServletConfidentialityConstraintHandler.handleRequest(ServletConfidentialityConstraintHandler.java:64)
12:13:45,872 ERROR [stderr] (default task-1) 	at io.undertow.core@2.2.13.SP2-redhat-00001//io.undertow.security.handlers.AbstractSecurityContextAssociationHandler.handleRequest(AbstractSecurityContextAssociationHandler.java:43)
12:13:45,873 ERROR [stderr] (default task-1) 	at org.wildfly.security.elytron-web.undertow-server-servlet@1.9.2.Final-redhat-00001//org.wildfly.elytron.web.undertow.server.servlet.CleanUpHandler.handleRequest(CleanUpHandler.java:38)
12:13:45,875 ERROR [stderr] (default task-1) 	at io.undertow.core@2.2.13.SP2-redhat-00001//io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43)
12:13:45,876 ERROR [stderr] (default task-1) 	at org.wildfly.extension.undertow@7.4.3.GA-redhat-00002//org.wildfly.extension.undertow.security.jacc.JACCContextIdHandler.handleRequest(JACCContextIdHandler.java:61)
12:13:45,877 ERROR [stderr] (default task-1) 	at io.undertow.core@2.2.13.SP2-redhat-00001//io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43)
12:13:45,878 ERROR [stderr] (default task-1) 	at org.wildfly.extension.undertow@7.4.3.GA-redhat-00002//org.wildfly.extension.undertow.deployment.GlobalRequestControllerHandler.handleRequest(GlobalRequestControllerHandler.java:68)
12:13:45,879 ERROR [stderr] (default task-1) 	at io.undertow.servlet@2.2.13.SP2-redhat-00001//io.undertow.servlet.handlers.SendErrorPageHandler.handleRequest(SendErrorPageHandler.java:52)
12:13:45,881 ERROR [stderr] (default task-1) 	at io.undertow.core@2.2.13.SP2-redhat-00001//io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43)
12:13:45,883 ERROR [stderr] (default task-1) 	at io.undertow.servlet@2.2.13.SP2-redhat-00001//io.undertow.servlet.handlers.ServletInitialHandler.handleFirstRequest(ServletInitialHandler.java:275)
12:13:45,885 ERROR [stderr] (default task-1) 	at io.undertow.servlet@2.2.13.SP2-redhat-00001//io.undertow.servlet.handlers.ServletInitialHandler.access$100(ServletInitialHandler.java:79)
12:13:45,887 ERROR [stderr] (default task-1) 	at io.undertow.servlet@2.2.13.SP2-redhat-00001//io.undertow.servlet.handlers.ServletInitialHandler$2.call(ServletInitialHandler.java:134)
12:13:45,888 ERROR [stderr] (default task-1) 	at io.undertow.servlet@2.2.13.SP2-redhat-00001//io.undertow.servlet.handlers.ServletInitialHandler$2.call(ServletInitialHandler.java:131)
12:13:45,890 ERROR [stderr] (default task-1) 	at io.undertow.servlet@2.2.13.SP2-redhat-00001//io.undertow.servlet.core.ServletRequestContextThreadSetupAction$1.call(ServletRequestContextThreadSetupAction.java:48)
12:13:45,891 ERROR [stderr] (default task-1) 	at io.undertow.servlet@2.2.13.SP2-redhat-00001//io.undertow.servlet.core.ContextClassLoaderSetupAction$1.call(ContextClassLoaderSetupAction.java:43)
12:13:45,893 ERROR [stderr] (default task-1) 	at org.wildfly.extension.undertow@7.4.3.GA-redhat-00002//org.wildfly.extension.undertow.deployment.UndertowDeploymentInfoService$UndertowThreadSetupAction.lambda$create$0(UndertowDeploymentInfoService.java:1551)
12:13:45,895 ERROR [stderr] (default task-1) 	at org.wildfly.extension.undertow@7.4.3.GA-redhat-00002//org.wildfly.extension.undertow.deployment.UndertowDeploymentInfoService$UndertowThreadSetupAction.lambda$create$0(UndertowDeploymentInfoService.java:1551)
12:13:45,897 ERROR [stderr] (default task-1) 	at org.wildfly.extension.undertow@7.4.3.GA-redhat-00002//org.wildfly.extension.undertow.deployment.UndertowDeploymentInfoService$UndertowThreadSetupAction.lambda$create$0(UndertowDeploymentInfoService.java:1551)
12:13:45,899 ERROR [stderr] (default task-1) 	at org.wildfly.extension.undertow@7.4.3.GA-redhat-00002//org.wildfly.extension.undertow.deployment.UndertowDeploymentInfoService$UndertowThreadSetupAction.lambda$create$0(UndertowDeploymentInfoService.java:1551)
12:13:45,901 ERROR [stderr] (default task-1) 	at io.undertow.servlet@2.2.13.SP2-redhat-00001//io.undertow.servlet.handlers.ServletInitialHandler.dispatchRequest(ServletInitialHandler.java:255)
12:13:45,903 ERROR [stderr] (default task-1) 	at io.undertow.servlet@2.2.13.SP2-redhat-00001//io.undertow.servlet.handlers.ServletInitialHandler.access$000(ServletInitialHandler.java:79)
12:13:45,905 ERROR [stderr] (default task-1) 	at io.undertow.servlet@2.2.13.SP2-redhat-00001//io.undertow.servlet.handlers.ServletInitialHandler$1.handleRequest(ServletInitialHandler.java:100)
12:13:45,906 ERROR [stderr] (default task-1) 	at io.undertow.core@2.2.13.SP2-redhat-00001//io.undertow.server.Connectors.executeRootHandler(Connectors.java:387)
12:13:45,907 ERROR [stderr] (default task-1) 	at io.undertow.core@2.2.13.SP2-redhat-00001//io.undertow.server.HttpServerExchange$1.run(HttpServerExchange.java:852)
12:13:45,908 ERROR [stderr] (default task-1) 	at org.jboss.threads@2.4.0.Final-redhat-00001//org.jboss.threads.ContextClassLoaderSavingRunnable.run(ContextClassLoaderSavingRunnable.java:35)
12:13:45,910 ERROR [stderr] (default task-1) 	at org.jboss.threads@2.4.0.Final-redhat-00001//org.jboss.threads.EnhancedQueueExecutor.safeRun(EnhancedQueueExecutor.java:1990)
12:13:45,911 ERROR [stderr] (default task-1) 	at org.jboss.threads@2.4.0.Final-redhat-00001//org.jboss.threads.EnhancedQueueExecutor$ThreadBody.doRunTask(EnhancedQueueExecutor.java:1486)
12:13:45,913 ERROR [stderr] (default task-1) 	at org.jboss.threads@2.4.0.Final-redhat-00001//org.jboss.threads.EnhancedQueueExecutor$ThreadBody.run(EnhancedQueueExecutor.java:1348)
12:13:45,914 ERROR [stderr] (default task-1) 	at org.jboss.xnio@3.8.5.SP1-redhat-00001//org.xnio.XnioWorker$WorkerThreadFactory$1$1.run(XnioWorker.java:1280)
12:13:45,916 ERROR [stderr] (default task-1) 	at java.base/java.lang.Thread.run(Thread.java:829)
12:13:45,920 ERROR [stderr] (default task-1) Caused by: org.jose4j.jwt.consumer.InvalidJwtException: JWT processing failed. Additional details: [[17] Unable to process JOSE object (cause: org.jose4j.lang.UnresolvableKeyException: SRJWT07004: Failed to load a key from the key content while resolving): JsonWebSignature{"kid":"pink-key","typ":"JWT","alg":"RS256"}->eyJraWQiOiJwaW5rLWtleSIsInR5cCI6IkpXVCIsImFsZyI6IlJTMjU2In0=.eyJqdGkiOiJlYTVmMzkzZi00OWFlLTQyNTUtOTc5OC1hZmQ5YzJiZmM2OGMiLCJzdWIiOiJGQUtFX1VTRVIiLCJncm91cHMiOlsiZ3JvdXAyIiwiZ3JvdXAxIl0sImF1ZCI6Im1pY3JvcHJvZmlsZS1qd3QtdGVzdHN1aXRlIiwiaXNzIjoiaXNzdWVyIiwiaWF0IjoxNjQ3MzQyNzgwLCJleHAiOjE2NDczNDYzODAsInVwbiI6IkZBS0VfVVNFUiIsInByZWZlcnJlZF91c2VybmFtZSI6IkZBS0VfVVNFUiJ9.Nnj4uas19FOeiCmRM5h8ldr50CN5GRno4RffNNedUQ_ls4LYYgwdi_XI_kcw-zcSQ1L0obd60qWhaVNufQUTSYHnG8GzW7UyroIjjVtAi34lALyMubW__O5FQDID-fDkGftWfemeGxVNmu33kKS1E-s33hIA_y2AOgVWFODHkPVdIztl2VXWhfvuQa3B8eqs3zWfZgT7zNLvhhaAqK5QQ-eRUoaizuI6eD5yxRTfjJpeUVzWhQLQipzcUYUClG63i6ez13eYt7n5aYd01Tld4xvM0ZcJDzaASFLo1RAbNFjTrRJeugW1mF7mRThjHgFvJnCjzv65Y78PVS0mutxkOQ==]
12:13:45,922 ERROR [stderr] (default task-1) 	at org.bitbucket.jose4j//org.jose4j.jwt.consumer.JwtConsumer.processContext(JwtConsumer.java:264)
12:13:45,923 ERROR [stderr] (default task-1) 	at org.bitbucket.jose4j//org.jose4j.jwt.consumer.JwtConsumer.process(JwtConsumer.java:426)
12:13:45,925 ERROR [stderr] (default task-1) 	at io.smallrye.jwt@3.0.0.redhat-00001//io.smallrye.jwt.auth.principal.DefaultJWTTokenParser.parseClaims(DefaultJWTTokenParser.java:141)
12:13:45,926 ERROR [stderr] (default task-1) 	... 43 more
12:13:45,928 ERROR [stderr] (default task-1) Caused by: org.jose4j.lang.UnresolvableKeyException: SRJWT07004: Failed to load a key from the key content while resolving
12:13:45,930 ERROR [stderr] (default task-1) 	at io.smallrye.jwt@3.0.0.redhat-00001//io.smallrye.jwt.auth.principal.AbstractKeyLocationResolver.reportUnresolvableKeyException(AbstractKeyLocationResolver.java:187)
12:13:45,931 ERROR [stderr] (default task-1) 	at io.smallrye.jwt@3.0.0.redhat-00001//io.smallrye.jwt.auth.principal.KeyLocationResolver.resolveKey(KeyLocationResolver.java:66)
12:13:45,933 ERROR [stderr] (default task-1) 	at org.bitbucket.jose4j//org.jose4j.jwt.consumer.JwtConsumer.processContext(JwtConsumer.java:213)
12:13:45,935 ERROR [stderr] (default task-1) 	... 45 more

      Attachments

        Issue Links

          is cloned by

          Bug - A problem that impairs or prevents the functions of the product. WFLY-16156 MP JWT return 500 instead of 401.

          • Major - To be worked after higher priority work items are addressed. When the severity is high and the effort to change it is low to moderate, this term is chosen. Issues in this category likely have an existing workaround but implementation or execution may be non-trivial.
          • Closed

          Activity

            People

              dvilkola@redhat.com Diana Krepinska
              mkopecky@redhat.com Marek Kopecky
              Votes:
              0 Vote for this issue
              Watchers:
              5 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: