[keycloak-user] Hitting error -- "Didn't find publicKey for specified kid"

[Rajesh Ghosh]

Hi,

I am trying to secure my REST services using the method described in the
document --


http://blog.keycloak.org/2015/10/getting-started-with-keycloak-securing.html


I am securing my war using JBoss subsystem , instead of per-war option. The
relevant sections from my standalone.xml  are posted below.

    <extensions>
         ......
        <extension module="org.keycloak.keycloak-adapter-subsystem"/>
    </extensions>

         <security-domains>
                .....
                <security-domain name="keycloak">
                    <authentication>
                        <login-module
code="org.keycloak.adapters.jboss.KeycloakLoginModule" flag="required"/>
                    </authentication>
                </security-domain>
            </security-domains>

        <subsystem xmlns="urn:jboss:domain:keycloak:1.1">
            <secure-deployment name="my war file.war">
                <realm>bkofc</realm>
                <resource>bkofc-svc</resource>

<use-resource-role-mappings>true</use-resource-role-mappings>
                <bearer-only>true</bearer-only>
                <auth-server-url>http://192.168.99.100/30001/auth
</auth-server-url>
                <ssl-required>none</ssl-required>
                <credential
name="secret">9bcc6d9f-9c72-4b58-b297-79f0f207d9e1</credential>
            </secure-deployment>
        </subsystem>

I am able to obtain the access token.

curl -i  curl --data
"grant_type=password&client_id=bkofc-web&username=user&password=password"
http://192.168.99.100:30001/auth/realms/bkofc/protocol/openid-connect/token

Note:- I have created 2 clients -- i)  bkofc-svc which is bearer only, for
my REST services  ii) bkofc-web , a public client to simulate UI login

However when I try to use the access token to invoke a service, I am
getting the error -

Status: 401

WWW-Authenticate Bearer realm="bkofc", error="invalid_token",
error_description="Didn't find publicKey for specified kid"

Please let me know if I am missing something here. I have been breaking my
head last few days without any luck !  I have also tried rotating the realm
keys.

Thanks,
Rajesh