Authentication credentials are missing or invalid. - Provide a properly configured and signed bearer token, and make sure that it has not expired

[khoogheem]

New Issue Checklist

• [ x] Updated fastlane to the latest version
• [ x] I read the Contribution Guidelines
• [ x] I read docs.fastlane.tools
• [x ] I searched for existing GitHub issues

Issue Description

Started receiving the Authentication credentials are missing or invalid. - Provide a properly configured and signed bearer token, and make sure that it has not expired message..

We had not changed anything in our Fastlane and the API Keys have not been revoked.
I have even tested by creating a new API Key on the itunesConnect.

Command executed

      api_key = app_store_connect_api_key(
        key_id: "GXXXXXX",
        issuer_id: "69a6de85-xxxxxx-5b8c7c11a4d1",
        key_content: "-----BEGIN PRIVATE KEY-----\nMIqjg1/eUB\nLxxyWE/va\nBWxxxQW3zb\n-----END PRIVATE KEY-----",
        in_house: false
      )

      sigh(
        api_key: api_key,
        adhoc: true,
        force: true
      )

I have also tied to just use CI env var which no change.

Complete output when running fastlane, including the stack trace and command used

Authentication credentials are missing or invalid. - Provide a properly configured and signed bearer token, and make sure that it has not expired. Learn more about Generating Tokens for API Requests https://developer.apple.com/go/?id=api-generating-tokens

[fastlane-bot]

It seems like you have not included the output of fastlane env
To make it easier for us help you resolve this issue, please update the issue to include the output of fastlane env 👍

[khoogheem]

I should probably mention the key is created with role App Manager

[crazymanish]

Hi @khoogheem

Can you try sigh using the Admin role? https://developer.apple.com/support/roles/
If you will face an issue with the Admin role too...requesting you to start a discussion here
https://github.com/fastlane/fastlane/discussions/categories/q-a
.

[khoogheem]

Same issue with Admin

[khoogheem]

@crazymanish I think there is an issue regardless.. I tested by putting everything into a json so I could just run
fastlane sigh --api_key_path fastlane/api_key_admin.json
NO Duration set - Doesn't Work
Duration of 1200: Doesn't work
Duration of 800: Doesn't work
Duration of 500: 👍 works

[crazymanish]

this is interesting...reopening

[formatCvt]

same issue (without duration)

[IlyaKiselevKolibri]

We are having the same issue using the key with the admin role:

12:30:33  [11:30:36]: Verifying that the certificate and profile are still valid on the Dev Portal...

12:30:33  [11:30:36]: Creating authorization token for App Store Connect API

12:30:34  [11:30:36]: #<Spaceship::UnauthorizedAccessError: Authentication credentials are missing or invalid. - Provide a properly configured and signed bearer token, and make sure that it has not expired. Learn more about Generating Tokens for API Requests https://developer.apple.com/go/?id=api-generating-tokens>```

[crazymanish]

Okay, cool! I am not sure why this is causing this suddenly, don't have an AppStoreConnectAPI key to debug this issue. 🤪
I am tagging @joshdholtz for this issue! 😇

[MatejBalantic]

We are seeing the same issue suddenly with a key that was working fine. It does look like an issue with Apple's API, given that I am unable to create a new token in the App Store Connect, seeing bunch of 500 errors in the developer console.

[dehlen]

Seems like AppStore Connect has some problems atm? I get an error message and can't see any apps when logging in via Safari.

[florieger]

Same issue, AppStore Connect website shows error message instead of apps.

[florieger]

Seems to be fixed.

[IlyaKiselevKolibri]

Not sure if the AppStore Connect issue was related though, as for us the initial problem with the Auth is there since Friday evening.

[khoogheem]

Right.. My issues started on my Thursday/Friday builds..

Sure it might still be an Apple Issue.. but what made no sense was the default durations just stopped working.. and I could only get it to work with a duration of 500

[IlyaKiselevKolibri]

Totally! I can confirm that duration of 500 also does the trick for us.

[crazymanish]

Adding 500 seconds duration sounds crazy workaround, but I don't surprise with Apple 🍏🍎 anymore 😇😂

[weakfl]

Doesn't work for us, even with duration set to 500.

[cdoky]

It does work for me

Adding 500 seconds duration sounds crazy workaround, but I don't surprise with Apple 🍏🍎 anymore 😇😂

[yakimant]

We didn't change anything (like duration), but it started to work again.

[itismadhan]

Can confirm that setting the duration to 500 fixes the issue.

[pvroosendaal]

Adding 500 seconds duration works for us too.

[crazymanish]

Hi all,
I am closing this as this seems to be a temporary Apple issue, if something crazy will happen again, maybe we can submit Radar? 🤔 (Radar project was a mess 5years ago when I work on macOS client in Apple 🤪)

btw, In my team, we don't use any duration and everything seems to work so far... 😉

[jacksonsmith]

@crazymanish I think there is an issue regardless.. I tested by putting everything into a json so I could just run
fastlane sigh --api_key_path fastlane/api_key_admin.json
NO Duration set - Doesn't Work
Duration of 1200: Doesn't work
Duration of 800: Doesn't work
Duration of 500: 👍 works

this work for us | paring with @fernandaaraujo

[jonbenk]

Hi all,

I'm facing the same issue here. Does anyone know how to change the token session duration on the Azure DevOps extension for the Apple App Store? Would it be possible via additional fastlane arguments on the task or using an environment variable? Thanks in advance!

[styrken]

Works for me too with duration 500 🥇

[ryanjwessel]

My team was experiencing this issue when we had the duration set to 500. We increased that value to 1200, which solved it for a time, but now seem to be experiencing it again.

Do we know what might be the root cause of this issue? Modifying the duration is a flaky solution, especially when deploying app versions via CI/CD.

[joshuawright11]

Also encountered this; not exactly relevant since I'm using GitHub actions but it seems like the same underlying issue.

For me a retrigger of the GitHub Actions workflow always works; wondering if it's something to do with a rate limit on Apple's side that returns an unhelpful error message.

[DuMaM]

I'm facing this issue again since 5days...
what's it's interesting when I use app_store_connect_api_key again, then it works fine in second run...
I got duration set on: 1200

[17:03:27]: Setting Provisioning Profile type to 'development'
[17:14:33]: Authentication credentials are missing or invalid. - Provide a properly configured and signed bearer token, and make sure that it has not expired. Learn more about Generating Tokens for API Requests https://developer.apple.com/go/?id=api-generating-tokens

I think that there maybe an issue on apple with generation such keys, and then it produces one with default values.

[abdulbasit18]

@crazymanish I think there is an issue regardless.. I tested by putting everything into a json so I could just run fastlane sigh --api_key_path fastlane/api_key_admin.json NO Duration set - Doesn't Work Duration of 1200: Doesn't work Duration of 800: Doesn't work Duration of 500: 👍 works

@khoogheem Hi I am facing the same issue , but I don't understand where I can add this duration in fastfile and I don't understand the Json file solution

    app_store_connect_api_key(
       key_id: "XXXXXXXXXXX",
       issuer_id: "XXXXXXXXXXXXXXXXXXXXXX",
       key_content: "XXXXXXXXXXXXXXXXX",
       
       is_key_content_base64: true,
       in_house: false #boolean value if team is Enterprise or not
     )


    # Get the required provisioning profiles
    bundle_identifiers.each do |identifier|
      sigh app_identifier: identifier,
           provisioning_name: provisioning_profile_name(identifier, export_method),
           adhoc: export_method == :adhoc,
           force: export_method == :adhoc
    end

[uiuco]

How to fundamentally solve this problem？

This problem started to appear around November 15th.
Even if I set the duration to 500, this problem occasionally occurs when packaging.
But if I call it again, the problem does not appear.
How to fundamentally solve this problem？

    app_store_connect_api_key(
      key_id: key_id,
      issuer_id: issuer_id,
      key_content: key_content,
      duration: 500, # maximum 1200
      in_house: false # optional but may be required if using match/sigh
    )

[DuMaM]

@wangdetong Take a look on @andersonvom #19502
I think it will solve this issues or at least reduce it. I'm also facing this problem for quite long time.

[uiuco]

@wangdetong Take a look on @andersonvom #19502 I think it will solve this issues or at least reduce it. I'm also facing this problem for quite long time.

Thank you, I will try

[andersonvom]

@DuMaM @wangdetong for what it's worth, after adding the changes from #19502 locally, my team and I have not seen this issue again: we can see in the logs that the failed requests are able to recover after a token refresh.

Side note: Happy 2022, everyone! 🥳