Keycloak Introspection Broken: Returns `{"active":false}` for valid requests #20434

archmangler · 2023-05-18T06:03:19Z

archmangler
May 18, 2023

I'm testing Keycloak JWT introspection using keycloak "quay.io/keycloak:legacy" image but it appears to be broken and is responding to valid introspection request with:

{"active":false}

I can obtain the bearer token from keycloak for the introspection request.
The authentication of the introspection request appears to succeed

However:

The message is cryptic
No indication in the logs or elsewhere what specifically is "inactive" about the token
Documentation is basically defective on this subject
forums either out of date on this error or nonexistent.

How to effectively drill down into what might be causing this response?

Thanks in advance,
Traiano

Navigation Menu

Repository navigation

Keycloak Introspection Broken: Returns `{"active":false}` for valid requests #20434

Uh oh!

{{title}}

Uh oh!

Replies: 0 comments

Select a reply

Uh oh!

Keycloak Introspection Broken: Returns {"active":false} for valid requests #20434

Uh oh!

archmangler May 18, 2023

Replies: 0 comments

Keycloak Introspection Broken: Returns `{"active":false}` for valid requests #20434

archmangler
May 18, 2023