Didn't find publicKey for kid

2,069 views
Skip to first unread message

nino martinez wael

unread,
Jul 6, 2020, 7:22:40 AM7/6/20
to Keycloak User
Why don't my kid show up ?

keycloak.png



12:35:25.700 [http-nio-8080-exec-7] DEBUG org.keycloak.adapters.rotation.JWKPublicKeyLocator - Realm public keys successfully retrieved for client app-springboot. New kids: []
12:35:25.700 [http-nio-8080-exec-7] ERROR org.keycloak.adapters.rotation.AdapterTokenVerifier - Didn't find publicKey for kid: 2662dbb4-3836-47af-bfa7-5b6caac2a6c4
12:35:25.700 [http-nio-8080-exec-7] ERROR org.keycloak.adapters.OAuthRequestAuthenticator - failed verification of token: Didn't find publicKey for specified kid

regards Nino

cen

unread,
Jul 6, 2020, 8:41:10 AM7/6/20
to keyclo...@googlegroups.com

In my experience, this means you are connecting to wrong instance of KC on the backend, got token from wrong instance of KC on the client side or you have put the wrong pubkey in your keycloak config on the backend. Simply put, token signature does not match the pubkey your backend acquired. Wrong kc instance can also mean wrong realm (since pubkey is different per realm). I have not encountered any other reasons personally.

--
You received this message because you are subscribed to the Google Groups "Keycloak User" group.
To unsubscribe from this group and stop receiving emails from it, send an email to keycloak-use...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/keycloak-user/d027d8ce-2d8a-465c-b93e-319d850c1b32o%40googlegroups.com.

nino martinez wael

unread,
Jul 7, 2020, 4:41:19 AM7/7/20
to Keycloak User
Okay after a lot of looking into details, I finally gave up and created a new realm with a all lowercase name. IT is working. Im not sure what the error was on the YeahYeahRealm except that it was Pascal cased
Reply all
Reply to author
Forward
0 new messages