Article - CS430214

Error "org.springframework.security.oauth2.server.resource.introspection.OAuth2IntrospectionException: 401 Unauthorized: [no body]" reproted in MethodServer.log Windchill PDMLink

Modified: 29-Oct-2024   


Applies To

  • Windchill PDMLink 13.0
SSO is configured with Ping Federate

Description

When validating connector in Thingworx Navigate, error below is reported in MethodServer.log :
DEBUG [ajp-nio-127.0.0.1-8011-exec-4] org.springframework.web.client.RestTemplate  - HTTP POST https://<PF_SERVER>/as/introspect.oauth2
DEBUG [ajp-nio-127.0.0.1-8011-exec-4] org.springframework.web.client.RestTemplate  - Accept=[application/xml, text/xml, application/json, application/cbor, application/*+xml, application/*+json]
DEBUG [ajp-nio-127.0.0.1-8011-exec-4] org.springframework.web.client.RestTemplate  - Writing [{token=[aqjwKfzZ4bmgk0wyE8yCeMzCnJIg]}] with org.springframework.http.converter.support.AllEncompassingFormHttpMessageConverter
DEBUG [ajp-nio-127.0.0.1-8011-exec-4] org.springframework.web.client.RestTemplate  - Response 401 UNAUTHORIZED
TRACE [ajp-nio-127.0.0.1-8011-exec-4] org.springframework.security.oauth2.server.resource.web.authentication.BearerTokenAuthenticationFilter  - Failed to process authentication request org.springframework.security.authentication.AuthenticationServiceException: 401 Unauthorized: [no body]
	at org.springframework.security.oauth2.server.resource.authentication.OpaqueTokenAuthenticationProvider.getOAuth2AuthenticatedPrincipal(OpaqueTokenAuthenticationProvider.java:131)
	at org.springframework.security.oauth2.server.resource.authentication.OpaqueTokenAuthenticationProvider.authenticate(OpaqueTokenAuthenticationProvider.java:107)
	at wt.jwt.oauth2.token.CustomAuthenticationManager.parentAuthenticate(CustomAuthenticationManager.java:131)
	at wt.jwt.oauth2.token.CustomAuthenticationManager.authenticate(CustomAuthenticationManager.java:68)
	at org.springframework.security.oauth2.server.resource.web.authentication.BearerTokenAuthenticationFilter.doFilterInternal(BearerTokenAuthenticationFilter.java:137)
	at org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:116)
	at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:374)
	at org.springframework.security.web.context.SecurityContextPersistenceFilter.doFilter(SecurityContextPersistenceFilter.java:117)
	at org.springframework.security.web.context.SecurityContextPersistenceFilter.doFilter(SecurityContextPersistenceFilter.java:87)
	at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:374)
	at org.springframework.security.web.FilterChainProxy.doFilterInternal(FilterChainProxy.java:233)
	at org.springframework.security.web.FilterChainProxy.doFilter(FilterChainProxy.java:191)
	at org.springframework.web.filter.DelegatingFilterProxy.invokeDelegate(DelegatingFilterProxy.java:352)
	at org.springframework.web.filter.DelegatingFilterProxy.doFilter(DelegatingFilterProxy.java:268)
	at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:164)
	at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:140)
	at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:167)
	at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:90)
	at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:483)
	at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:115)
	at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:93)
	at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:74)
	at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:344)
	at org.apache.coyote.ajp.AjpProcessor.service(AjpProcessor.java:431)
	at org.apache.coyote.AbstractProcessorLight.process(AbstractProcessorLight.java:63)
	at org.apache.coyote.AbstractProtocol$ConnectionHandler.process(AbstractProtocol.java:904)
	at org.apache.tomcat.util.net.NioEndpoint$SocketProcessor.doRun(NioEndpoint.java:1751)
	at org.apache.tomcat.util.net.SocketProcessorBase.run(SocketProcessorBase.java:52)
	at org.apache.tomcat.util.threads.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1190)
	at org.apache.tomcat.util.threads.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:659)
	at org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run(TaskThread.java:63)
	at java.base/java.lang.Thread.run(Thread.java:840)
Caused by: org.springframework.security.oauth2.server.resource.introspection.OAuth2IntrospectionException: 401 Unauthorized: [no body]
	at org.springframework.security.oauth2.server.resource.introspection.SpringOpaqueTokenIntrospector.makeRequest(SpringOpaqueTokenIntrospector.java:149)
	at org.springframework.security.oauth2.server.resource.introspection.SpringOpaqueTokenIntrospector.introspect(SpringOpaqueTokenIntrospector.java:128)
	at com.ptc.eauth.identity2.oauth2.rs.OpaqueTokenServices.introspect(OpaqueTokenServices.java:29)
	at org.springframework.security.oauth2.server.resource.authentication.OpaqueTokenAuthenticationProvider.getOAuth2AuthenticatedPrincipal(OpaqueTokenAuthenticationProvider.java:124)
	... 31 more
Caused by: org.springframework.web.client.HttpClientErrorException$Unauthorized: 401 Unauthorized: [no body]
	at org.springframework.web.client.HttpClientErrorException.create(HttpClientErrorException.java:106)
	at org.springframework.web.client.DefaultResponseErrorHandler.handleError(DefaultResponseErrorHandler.java:183)
	at org.springframework.web.client.DefaultResponseErrorHandler.handleError(DefaultResponseErrorHandler.java:137)
	at org.springframework.web.client.ResponseErrorHandler.handleError(ResponseErrorHandler.java:63)
	at org.springframework.web.client.RestTemplate.handleResponse(RestTemplate.java:942)
	at org.springframework.web.client.RestTemplate.doExecute(RestTemplate.java:891)
	at org.springframework.web.client.RestTemplate.exchange(RestTemplate.java:740)
	at org.springframework.security.oauth2.server.resource.introspection.SpringOpaqueTokenIntrospector.makeRequest(SpringOpaqueTokenIntrospector.java:146)
	... 34 more

 
This is a printer-friendly version of Article 430214 and may be out of date. For the latest version click CS430214