My Oracle Support Banner

The "PrincipalAuthenticator.assertIdentity : Token Type: Authorization" When Set ignores Custom WLS_* tokens set. (Doc ID 2782267.1)

Last updated on AUGUST 07, 2023

Applies to:

Oracle WebLogic Server - Version 12.2.1.3.0 and later
Information in this document applies to any platform.

Symptoms

The Upper stack product Oracle Utilities Customer Care and Billing application is being accessed using Web & SOAP interfaces. The incoming HTTP request has Authorization header as well as a "WLS_JWTXXX" custom header. The customer has a custom Authenticator for the WLS_* token which is not getting called.

This setup was working fine in WebLogic 12.1.3.0 however after WebLogic server was upgraded to 12.2.1.3.0 the HTTP request started failing with

 

Cause

To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!


In this Document
Symptoms
Cause
Solution
References


My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.