[keycloak-user] Authroization: Receiving "Failed to enforce policy decisions" for valid token after sometime

[Bruce Wings]

Has anyone else come across this issue?

On Fri, Sep 28, 2018 at 12:14 PM Bruce Wings <testoauth55 at gmail.com> wrote:

> Steps:
>
> 1. After obtaining a token from keycloak, I am able to
> authenticate/authorize user with this token.
> 2. After sometime(15-20 minutes), I start receiving *"Failed to enforce
> policy decisions"*. If the same token was valid a few minutes before,
> shouldn't I get the "*token expired*" message instead of "*Failed to
> enforce policy decisions*"?
>
> My access token lifespan is set to 8 hours. Still I see this behavior
> after just 15-20 minutes. Attached image for token expiry settings:
>
>
> [image: image.png]
>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image.png
Type: image/png
Size: 80955 bytes
Desc: not available
Url : http://lists.jboss.org/pipermail/keycloak-user/attachments/20181003/f45f757b/attachment-0001.png