Re: [keycloak-user] Hitting error -- "Didn't find publicKey for specified kid"

Hello Sebastien, I am using 3.1.0.Final build. Thanks, Rajesh On Mon, Jul 24, 2017 at 7:56 PM, Sebastien Blanc <sblanc(a)redhat.com&gt; wrote: > Which version of Keycloak are you using ? > > On Mon, Jul 24, 2017 at 3:15 PM, Rajesh Ghosh <ghosh.rajesh(a)gmail.com&gt; > wrote: > >> Hi, >> >> I am trying to secure my REST services using the method described in the >> document -- >> >> >> http://blog.keycloak.org/2015/10/getting-started-with-keyclo >> ak-securing.html >> >> >> I am securing my war using JBoss subsystem , instead of per-war option. >> The >> relevant sections from my standalone.xml are posted below. >> >> <extensions> >> ...... >> <extension module="org.keycloak.keycloak-adapter-subsystem"/> >> </extensions> >> >> <security-domains> >> ..... >> <security-domain name="keycloak"> >> <authentication> >> <login-module >> code="org.keycloak.adapters.jboss.KeycloakLoginModule" flag="required"/> >> </authentication> >> </security-domain> >> </security-domains> >> >> <subsystem xmlns="urn:jboss:domain:keycloak:1.1"> >> <secure-deployment name="my war file.war"> >> <realm>bkofc</realm> >> <resource>bkofc-svc</resource> >> >> <use-resource-role-mappings>true</use-resource-role-mappings> >> <bearer-only>true</bearer-only> >> <auth-server-url>http://192.168.99.100/30001/auth >> </auth-server-url> >> <ssl-required>none</ssl-required> >> <credential >> name="secret">9bcc6d9f-9c72-4b58-b297-79f0f207d9e1</credential> >> </secure-deployment> >> </subsystem> >> >> I am able to obtain the access token. >> >> curl -i curl --data >> "grant_type=password&client_id=bkofc-web&username=user&passw >> ord=password" >> http://192.168.99.100:30001/auth/realms/bkofc/protocol/openi >> d-connect/token >> >> Note:- I have created 2 clients -- i) bkofc-svc which is bearer only, >> for >> my REST services ii) bkofc-web , a public client to simulate UI login >> >> However when I try to use the access token to invoke a service, I am >> getting the error - >> >> Status: 401 >> >> WWW-Authenticate Bearer realm="bkofc", error="invalid_token", >> error_description="Didn't find publicKey for specified kid" >> >> Please let me know if I am missing something here. I have been breaking >> my >> head last few days without any luck ! I have also tried rotating the >> realm >> keys. >> >> Thanks, >> Rajesh >> _______________________________________________ >> keycloak-user mailing list >> keycloak-user(a)lists.jboss.org >> https://lists.jboss.org/mailman/listinfo/keycloak-user >> > >