Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Include user name in CWWKS1773E error message TS003412433 #11927

Closed
barbj opened this issue Apr 24, 2020 · 0 comments · Fixed by #12012
Closed

Include user name in CWWKS1773E error message TS003412433 #11927

barbj opened this issue Apr 24, 2020 · 0 comments · Fixed by #12012
Assignees
Labels
bug This bug is not present in a released version of Open Liberty release bug This bug is present in a released version of Open Liberty release:20006 serviceability Label used to track serviceability related issues team:Security SSO

Comments

@barbj
Copy link
Member

barbj commented Apr 24, 2020

When the OpenID Connect runtime receives a JWT that is expires, an error similar to the following is be emitted:

WWKS1737E: The OpenID Connect client [client123] failed to validate the JSON Web Token. The cause of the error was: [CWWKS1773E: Validation failed for the token requested by [client123] because the token is outside of its valid range. This might have been caused by either the current time [2020-04-23T11:22:10.733Z] being after the token expiration time [2020-04-22T17:37:26.000Z] or the issue time [2020-01-01T00:00:00.000Z] being too far away from the current time [2020-04-23T11:22:10.733Z].]

It would be helpful to include the username associated with the JWT so that the administrator can more easily fix the problem.

For instance:
CWWKS1773E: Validation failed for the token with subject [tom@example.com] requested by [client123] because the token is outside of its valid range.

Diagnostic information:

  • OpenLiberty Version: 20.0.0.4
@barbj barbj added bug This bug is not present in a released version of Open Liberty team:Security SSO release bug This bug is present in a released version of Open Liberty labels Apr 24, 2020
@barbj barbj changed the title TS003412433 Include user name in CWWKS1773E error message Include user name in CWWKS1773E error message TS003412433 Apr 24, 2020
@ayoho ayoho self-assigned this Apr 30, 2020
ayoho added a commit to ayoho/open-liberty that referenced this issue Apr 30, 2020
Adds the `sub` claim into this NLS message.

Resolves OpenLiberty#11927
@barbj barbj added the serviceability Label used to track serviceability related issues label Apr 14, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug This bug is not present in a released version of Open Liberty release bug This bug is present in a released version of Open Liberty release:20006 serviceability Label used to track serviceability related issues team:Security SSO
Projects
None yet
Development

Successfully merging a pull request may close this issue.

3 participants