SAP Knowledge Base Article - Preview

3748622 - OAuth/JWT Authentication Failures - JWKS endpoint returns multiple keys

Symptom

After April 30, OAuth authentication failures are occuring, with no changes to code or configuration.

You may encounter errors such as the following:
org.springframework.security.oauth2.jwt.JwtEncodingException
Failed to select a key since there are multiple for the signing algorithm

When calling the https://<website>/authorizationserver/oauth/jwks endpoint, multiple keys are returned, when previously only 1 key was returned. 

{
  "keys": [
    { "kid": "2", "kty": "RSA", ... },
    { "kid": "3", "kty": "RSA", ... }
  ]
}


Read more...

Environment

Commerce Cloud JDK 21

Product

SAP Commerce Cloud all versions

Keywords

KBA , CEC-SCC-CLA-ENV-EMG , Environment Management , CEC-SCC-PLA-PL , Platform , Problem

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.