Uploaded image for project: ' AGL Development'
  1. AGL Development
  2. SPEC-4918

Invalid Kuksa jwt tokens for Databroker

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Not a Bug
    • Icon: Major Major
    • None
    • None
    • Connectivity
    • None

      I am working on adding support for Databroker to the control panel.

      This bug was found while using the latest Qt IVI build, where kuksa-val-server has been replaced by Databroker. 

      Steps to recreate the issue:

      1. Launch the Databroker in Qt IVI image with the following command:
        • databroker --address 0.0.0.0 --tls-cert /etc/kuksa-val/Server.pem --tls-private-key /etc/kuksa-val/Server.key --jwt-public-key /usr/lib/python3.10/site-packages/kuksa_certificates/jwt/jwt.key.pub
      1. Connect to the Databroker via cli with the following command
        Note: CA.pem used for ca-certificate 
        • kuksa-client --cacertificate /home/suchinton/Repos/AGL_Demo_Control_Panel/assets/CA.pem --tls-server-name Server --protocol grpc --ip 10.42.0.95 --port 55555
      1. The connection was established successfully in secure mode.
      2. I tried to authorize the client with the following command: 
        • authorize /home/suchinton/.local/lib/python3.10/site-packages/kuksa_certificates/jwt/super-admin.json.token

       
      However, I got the following error:

      {
          "error": {
              "code": 16,
              "reason": "unauthenticated",
              "message": "Invalid auth token: DecodeError(\"JSON error: missing field `aud` at line 1 column 133\")"
          },
          "errors": []
      }

      I have verified the same by running similar steps using the client on the AGL image, modifying the control panel's config.py file and also using other available tokens. 

        No reviews matched the request. Check your Options in the drop-down menu of this sections header.

            scottm Scott Murray
            suchinton2001 Suchinton Chakravarty
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Created:
              Updated:
              Resolved: