Superset+Keycloak - JWT - The specified alg value is not allowed #25226

shkpk · 2023-12-01T20:26:17Z

shkpk
Dec 1, 2023

Hello

I have superset integrated with Keycloak, and to make API requests to superset, I'm trying to use JWT token, but I get error

{"msg":"The specified alg value is not allowed"}

I'm using this to generate token

token=$(curl --insecure --request POST http://localhost:8088/realms/test/protocol/openid-connect/token \
--header 'Content-Type: application/x-www-form-urlencoded' \
--data-urlencode "username=test" \
--data-urlencode "password=test123" \
--data-urlencode 'scope=email profile roles' \
--data-urlencode 'grant_type=password' \
--data-urlencode 'client_id=superset' \
--data-urlencode "client_secret=zxxxxxxxxxxxxxxxxxx" | jq -r .access_token)

and when I use

curl -k -L --request GET http://localhost:8090/api/v1/assets/export/ --header "Authorization: Bearer $token" --header "Content-Type: application/zip"

which returns

{"msg":"The specified alg value is not allowed"}

anyone can help with this?

DioCrafts · 2023-12-21T15:07:12Z

DioCrafts
Dec 21, 2023

I am having the same issue

0 replies

yeval · 2024-11-18T18:39:34Z

yeval
Nov 18, 2024

I am having the same issue. Has anyone found any solution to this?

0 replies

mpgalaxy · 2024-12-09T09:03:30Z

mpgalaxy
Dec 9, 2024

Hi, I'm using python-keycloak (python 3.12.7) with Keycloak 22 and I ran into the same issue.
For me setting the Default Signature Algorithm in Keycloak to RS256 fixed the problem, had RS512 which didn't work with this client (maybe a bug?)
(Realm settings -> Token -> Default Signature Algorithm)
Maybe this helps someone...

0 replies

DarksChoise · 2025-10-02T14:52:26Z

DarksChoise
Oct 2, 2025

Has anyone been able to resolve this? I am experiencing the same error.

8000

0 replies

stianst · 2025-10-02T15:09:51Z

stianst
Oct 2, 2025
Maintainer

Don't change the default signature algorithm of Keycloak; change it specifically for the client you use with Superset.

2 replies

DarksChoise Oct 2, 2025

How do I do it?

stianst Oct 3, 2025
Maintainer

Go to Advanced and search for Access token signature algorithm and change it to something Superset supports.

Navigation Menu

Repository navigation

Superset+Keycloak - JWT - The specified alg value is not allowed #25226

Uh oh!

{{title}}

Uh oh!

Replies: 5 comments 2 replies

Uh oh!

{{title}}

Uh oh!

Uh oh!

{{title}}

Uh oh!

Uh oh!

{{title}}

Uh oh!

Uh oh!

{{title}}

Uh oh!

Uh oh!

{{title}}

Uh oh!

Uh oh!

{{title}}

Uh oh!

Uh oh!

{{title}}

Uh oh!

Select a reply

Uh oh!

Superset+Keycloak - JWT - The specified alg value is not allowed #25226

Uh oh!

shkpk Dec 1, 2023

Replies: 5 comments · 2 replies

Uh oh!

DioCrafts Dec 21, 2023

Uh oh!

yeval Nov 18, 2024

Uh oh!

mpgalaxy Dec 9, 2024

Uh oh!

DarksChoise Oct 2, 2025

Uh oh!

stianst Oct 2, 2025 Maintainer

Uh oh!

DarksChoise Oct 2, 2025

Uh oh!

stianst Oct 3, 2025 Maintainer

shkpk
Dec 1, 2023

Replies: 5 comments 2 replies

DioCrafts
Dec 21, 2023

yeval
Nov 18, 2024

mpgalaxy
Dec 9, 2024

DarksChoise
Oct 2, 2025

stianst
Oct 2, 2025
Maintainer

stianst Oct 3, 2025
Maintainer