Assistance with JWT Token Expiry and OAuth Server-to-Server Authentication Issue | Community
Skip to main content
N
naruk89179065
Level 3
February 13, 2025
Solved

Assistance with JWT Token Expiry and OAuth Server-to-Server Authentication Issue

  • February 13, 2025
  • 1 reply
  • 1029 views

Requirement: I have a form in the publish environment, and upon submission, I need to create a .txt file in the author environment.

Current Solution:

  • I created a technical account ID through the Developer Console in the Integration tab, tuned the JWT token, and was able to successfully hit the author environment.
  • However, as the JWT token is nearing expiry, I am transitioning to OAuth Server-to-Server authentication. To do this, I selected the project and Cloud Manager API, created an account, and generated a new token.

Issue:

  • When I attempt to hit the author cloud URL, I am receiving a 401 Unauthorized error.

     

Question:

  • The technical user account was not created in the author's environment. Do we need to provide additional permissions to resolve the 401 Unauthorized error?

Any assistance or suggestions would be greatly appreciated.

CC:  @arunpatidar  @konstantyn_diachenko  @amitvishwakarma @estebanbustamante   @

Best answer by KotiReddyNa

Hi @kotireddyna,

Let me clarify:

There should be no problem with resolving the JWT maven dependencies and they are not related to the expiry of technical account credentials. Here's a code sample in java to help generate access tokens using JWT: https://github.com/AdobeDocs/adobe-dev-console/tree/main/samples/adobe-jwt-java

 

Hope this makes things clear

 


thanks @vinay-lakshman 

We contacted Adobe Support via email and received the following response:

 

 

This also affects the AEM Developer console as well as the Adobe Developer console. We take security very seriously at Adobe and the vulnerability to the JWT was such that our engineers made the decision to switch to OAuth server to server. So I would still suggest you implement an OAuth integration rather than a JWT for your connections prior to the end of life on June 30th, 2025.

1 reply

V
Vinay-Lakshman
Level 2
February 14, 2025

Hi @naruk89179065,

For Integration (Technical) accounts setup in an AEM Cloud author environment's Developer Console, Oauth is not supported yet and it still relies on JWT for authentication.

 

You can refer this thread for more details and links for relevant documentation: https://experienceleaguecommunities.adobe.com/t5/adobe-experience-manager/difference-between-technical-accounts-in-adobe-developer-console/m-p/729676#M179483

 

Hope this helps,

Vinay

    K
    KotiReddyNa
    Level 2
    February 14, 2025

    thanks @vinay-lakshman 
    Could you please confirm whether the following statement is correct?

    AEM Developer Console JWT Access Tokens: JWT access tokens generated in the AEM Developer Console do not expire, However, we can regenerate the technical account or token whenever necessary to refresh credentials 

    As for Maven dependencies, even after the JWT token expires, they will still work. The following dependencies are included in pom.xml file:

    <dependency>

    <groupId>io.jsonwebtoken</groupId>

    <artifactId>jjwt-api</artifactId>

    <version>0.11.2</version>

    <scope>provided</scope>

    </dependency>

    <dependency>

    <groupId>io.jsonwebtoken</groupId>

    <artifactId>jjwt-impl</artifactId>

    <version>0.11.2</version>

    <scope>runtime</scope>

    </dependency>

    <dependency>

    <groupId>io.jsonwebtoken</groupId>

    <artifactId>jjwt-jackson</artifactId>

    <version>0.11.2</version>

    <scope>runtime</scope>

    </dependency>

    V
    Vinay-Lakshman
    Level 2
    February 14, 2025

    Hi @kotireddyna,

    Let me clarify:

    There should be no problem with resolving the JWT maven dependencies and they are not related to the expiry of technical account credentials. Here's a code sample in java to help generate access tokens using JWT: https://github.com/AdobeDocs/adobe-dev-console/tree/main/samples/adobe-jwt-java

     

    Hope this makes things clear

     

      Terms & ConditionsAccessibility statement

      Loading footer...