oracle/http_jwt_token_service_policy Not Accepting Client JWT Token When Attached To A Rest OSB Proxy Service In 12.2.1.4 (Doc ID 2910450.1)

Last updated on FEBRUARY 06, 2024

Applies to:

Symptoms

When invoking a secured OSB service from a client that is passing a JWT token as its security mechanism, an error occurs trying to authenticate the JWT token using the oracle/http_jwt_token_service_policy OWSM policy attached to the rest proxy service.

The jwt trust has been added to the domain configuration and the trust certificates have been imported into the domain keystore.

The error being seen is as follows:

[oracle.wsm.policy.name: oracle/http_jwt_token_service_policy] Failure in Oracle WSM Agent processRequest, category=security, function=agent.function.service, application=Service Bus Kernel, composite=null, modelObj=null, policy=oracle/http_jwt_token_service_policy, policyVersion=null, assertionName={http://schemas.oracle.com/ws/2006/01/securitypolicy}http-jwt-security., Failed due to : UnsupportedSecurityToken : The security token used is not supported..

Cause

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.