Oidc revocation token - bad request - No security parameters context is available

[Domenico Cervino]

Hi,

trying to revoke the access token I get a bad request.
In the logs the only message is this:
2024-03-22 11:46:43,431 ERROR [net.shibboleth.oidc.security.impl.JWTSignatureValidationUtil:76] ([default task-2]) No security parameters context is available
2024-03-22 11:46:43,432 INFO [Shibboleth-Audit.OIDC.SSO:283] ([default task-2]) 10.81.131.72|2024-03-22T10:46:43.428850Z|2024-03-22T10:46:43.432682Z||tonr2-custom-locale-sempl||||||||||TokenRevocationRequest|OAuth2RevocationErrorResponse|||||Apache-HttpClient/4.5.13 (Java/1.8.0_111)
 
How should "No security parameters context is available" be interpreted?
More details,apparently the call seems correct to me, I'm in the scenario with private_key_jwt authentication.
1) I use these params: client_id,token,token_type_hint,client_assertion,client_assertion_type
2) I construct the client_assertion value similarly to how I successfully did it for the token request, the only difference is the "aud" valorised with the revocation endpoint.
3) In the header I set Content-Type to application/x-www-form-urlencoded
4) Send in POST
5) The same test code, witho other oidc OP successfully revoke the token.
 
Any suggestions are appreciated.
 
Thanks
Domenico
 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20240322/0f03066b/attachment.htm>