Looks like the pub-key in customer-portal-cli doesn't match the pub-key for the realm. Did you import the testrealm.json from the example, or manually create the realm? ----- Original Message ----- > From: "Vivek Srivastav (vivsriva)" <vivsriva(a)cisco.com&gt; > To: keycloak-user(a)lists.jboss.org > Sent: Tuesday, 29 July, 2014 8:05:14 PM > Subject: [keycloak-user] Implicit client login problem > > I am trying to get the customer-portal-cli to work > > customer-portal-cli has the following configuration: > > access type: public > redirect URL: http://localhost > > Keycloak Environment: > > > 1.0-beta-3 > > The app is able to launch a browser, obtain the code, but I am getting > invalid token signature. Following is the jboss log: > > > > 14:53:40,883 INFO [org.keycloak.services.resources.TokenService] > (http-/127.0.0.1:8080-8) no authorization header > > 14:53:40,891 INFO [org.keycloak.audit] (http-/127.0.0.1:8080-8) > event=CODE_TO_TOKEN, realmId=bd1320b5-7601-4056-8e30-4839f5bfdf8b, > clientId=customer-portal-cli, >userId=13598dc1-61d5-42e8-a6b1-86595548b384, > ipAddress=127.0.0.1, >refresh_token_id=784df1b7-8d6e-44de-80d7-b3ce44317007, > code_id=d0ae1bc2-f66c-4d44-9a48-72059f5463f81406660020834, > token_id=8170b67d-888f-4770-a4fd-691ece674214 > > > > > Commands: > > login - login with desktop browser if available, otherwise do manual >login > > login-manual - manual login > > login-desktop - desktop login > > token - show token details > > id-token - show ID token details > > profile - retrieve user profile > > customers - retrieve customers listing > > refresh - refresh token > > exit - exit > > > > > $ login > > > > > Invalid token signature. > > Appreciate any help. > > Kind Regards, > Vivek > > > > _______________________________________________ > keycloak-user mailing list > keycloak-user(a)lists.jboss.org > https://lists.jboss.org/mailman/listinfo/keycloak-user