[External Email] Re: disable oauth2-jwt

[Jeffrey J Ramsay]

Hello -

I definitely configured the hash incorrectly and am now using the plain
string for testing; however, the problems persist. The authentication is
now working, but I am getting this message and am not sure if it is one I
should ignore. What are the steps to open a support case for additional
help with this? I still don't have any projects in the client portal.

[net.shibboleth.idp.plugin.oidc.op.profile.impl.AbstractBuildErrorResponseFromEvent:159]
- Profile Action BuildTokenErrorResponseFromEvent: No mapped event found
for InvalidSecurityConfiguration, creating general invalid_request

Thanks,
-Jeff



On Fri, Sep 20, 2024 at 9:31 AM Cantor, Scott <cantor.2 at osu.edu> wrote:

> > Okay. I ensured that client_secret_basic was set, but it still
> > failed.
>
> All we can really tell you at this stage is that the secret's wrong.
>
> I see your using the inline hash trick for it, so the only conclusion I
> would be able to reach is they just don't match.
>
> The most likely reason would be the hash was corrupted accidentally, it's
> sensitive to things like linefeeds, easy to forget a -n parameter somewhere
> when piping data into a sha tool.
>
> It is allowed to put the secret inline verbatim, so for testing you might
> want to just do that.
>
> Of course, we can't prove the client is actually sending the right secret
> in the first place.
>
> Logging-wise, the inference is simply "they didn't match", it wouldn't be
> logging anything else for that case.
>
> -- Scott
>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20240920/ffd5313c/attachment.htm>