Page MenuHomePhabricator
Paste P95924

failed JWT token validation
ActivePublic
Actions

Authored by atsuko on Aug 6 2026, 8:51 AM.
Project Tags
None
Referenced Files
F97360077: failed JWT token validation
Aug 6 2026, 8:51 AM
Subscribers
None
2026-08-06T08:50:55.394025Z [warning ] The HMAC key is 22 bytes long, which is below the minimum recommended length of 64 bytes for SHA512. See RFC 7518 Section 3.2. [py.warnings] category=InsecureKeyLengthWarning correlation_id=019fd644-a40d-72b3-b504-82527e0657ee filename=/home/app/.local/lib/python3.11/site-packages/jwt/api_jwt.py lineno=368
2026-08-06T08:50:55.394440Z [warning ] Failed to validate JWT [airflow.api_fastapi.execution_api.security] correlation_id=019fd644-a40d-72b3-b504-82527e0657ee loc=security.py:127
Traceback (most recent call last):
File "/home/app/.local/lib/python3.11/site-packages/airflow/api_fastapi/execution_api/security.py", line 125, in __call__
claims = await validator.avalidated_claims(creds.credentials, dict(self.required_claims))
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/home/app/.local/lib/python3.11/site-packages/airflow/api_fastapi/auth/tokens.py", line 334, in avalidated_claims
claims = jwt.decode(
^^^^^^^^^^^
File "/home/app/.local/lib/python3.11/site-packages/jwt/api_jwt.py", line 368, in decode
decoded = self.decode_complete(
^^^^^^^^^^^^^^^^^^^^^
File "/home/app/.local/lib/python3.11/site-packages/jwt/api_jwt.py", line 265, in decode_complete
decoded = self._jws.decode_complete(
^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/home/app/.local/lib/python3.11/site-packages/jwt/api_jws.py", line 270, in decode_complete
self._verify_signature(
File "/home/app/.local/lib/python3.11/site-packages/jwt/api_jws.py", line 417, in _verify_signature
raise InvalidSignatureError("Signature verification failed")
jwt.exceptions.InvalidSignatureError: Signature verification failed
2026-08-06T08:50:55.396194Z [warning ] JWT reissue middleware failed to refresh token [airflow.api_fastapi.execution_api.app] error='Signature verification failed' loc=app.py:166
Traceback (most recent call last):
File "/home/app/.local/lib/python3.11/site-packages/airflow/api_fastapi/execution_api/app.py", line 149, in dispatch
claims = await validator.avalidated_claims(token, {})
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/home/app/.local/lib/python3.11/site-packages/airflow/api_fastapi/auth/tokens.py", line 334, in avalidated_claims
claims = jwt.decode(
^^^^^^^^^^^
File "/home/app/.local/lib/python3.11/site-packages/jwt/api_jwt.py", line 368, in decode
decoded = self.decode_complete(
^^^^^^^^^^^^^^^^^^^^^
File "/home/app/.local/lib/python3.11/site-packages/jwt/api_jwt.py", line 265, in decode_complete
decoded = self._jws.decode_complete(
^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/home/app/.local/lib/python3.11/site-packages/jwt/api_jws.py", line 270, in decode_complete
self._verify_signature(
File "/home/app/.local/lib/python3.11/site-packages/jwt/api_jws.py", line 417, in _verify_signature
raise InvalidSignatureError("Signature verification failed")
jwt.exceptions.InvalidSignatureError: Signature verification failed
2026-08-06T08:50:55.449839Z [info ] request finished [http.access] client_addr=10.67.29.180:35844 duration_us=4903558 loc=http_access_log.py:130 method=PATCH path=/execution/task-instances/019fd644-7407-7d58-81c5-1a3f7ea4da3a/run query= status_code=403
Content licensed under Creative Commons Attribution-ShareAlike (CC BY-SA) 4.0 unless otherwise noted; code licensed under GNU General Public License (GPL) 2.0 or later and other open source licenses. By using this site, you agree to the Terms of Use, Privacy Policy, and Code of Conduct. · Wikimedia Foundation · Privacy Policy · Code of Conduct · Terms of Use · Disclaimer · CC-BY-SA · GPL · Credits