[jira] [Commented] (NIFI-12317) REST API Rejects Keycloak OIDC Access Tokens with HTTP 401

["David Handermann (Jira)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/NIFI-12317?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18008805#comment-18008805 ] 

David Handermann commented on NIFI-12317:
-----------------------------------------

Apache NiFi 1 reached end of support in December 2024, so support for the Client Credentials Flow is limited to Apache NiFi 2.

> REST API Rejects Keycloak OIDC Access Tokens with HTTP 401
> ----------------------------------------------------------
>
>                 Key: NIFI-12317
>                 URL: https://issues.apache.org/jira/browse/NIFI-12317
>             Project: Apache NiFi
>          Issue Type: Improvement
>          Components: Security
>            Reporter: Anmol
>            Assignee: David Handermann
>            Priority: Major
>             Fix For: 2.0.0-M3
>
>
> I have integrated Nifi with keycloak and NIfi UI is working fine. But if i am hitting nifi-api with keycloak access token , nifi is giving 401 error.
>  
> error: Unauthorized error="invalid_token", error_description="An error occurred while attempting to decode the Jwt: Signed JWT rejected: Another algorithm expected, or no matching key(s) found", error_uri="https://tools.ietf.org/html/rfc6750#section-3.1"



--
This message was sent by Atlassian Jira
(v8.20.10#820010)