<!doctype html>
<html>
<head>
<meta charset="UTF-8">
</head>
<body>
<p class="default-style">Hi,</p>
<div>
trying to revoke the access token I get a bad request.
</div>
<div>
In the logs the only message is this:
</div>
<div>
<em>2024-03-22 11:46:43,431 ERROR [net.shibboleth.oidc.security.impl.JWTSignatureValidationUtil:76] ([default task-2]) No security parameters context is available</em>
<br><em>2024-03-22 11:46:43,432 INFO [Shibboleth-Audit.OIDC.SSO:283] ([default task-2]) 10.81.131.72|2024-03-22T10:46:43.428850Z|2024-03-22T10:46:43.432682Z||tonr2-custom-locale-sempl||||||||||TokenRevocationRequest|OAuth2RevocationErrorResponse|||||Apache-HttpClient/4.5.13 (Java/1.8.0_111)</em>
</div>
<div>
</div>
<div>
How should "No security parameters context is available" be interpreted?
</div>
<div>
More details,apparently the call seems correct to me, I'm in the scenario with private_key_jwt authentication.
<br>1) I use these params: client_id,token,token_type_hint,client_assertion,client_assertion_type
<br>2) I construct the client_assertion value similarly to how I successfully did it for the token request, the only difference is the "aud" valorised with the revocation endpoint.
<br>3) In the header I set Content-Type to application/x-www-form-urlencoded
<br>4) Send in POST
<br>5) The same test code, witho other oidc OP successfully revoke the token.
</div>
<div>
</div>
<div>
Any suggestions are appreciated.
</div>
<div>
</div>
<div>
Thanks
</div>
<div>
Domenico
</div>
<div>
</div>
</body>
</html>