Hello team,
I’m facing problem with key refresh token.
We deployed docker image keycloak:22.0.5 , SSO Session Idle & SSO Session Max are configured 30 days, Access Token Lifespan for 10 minutes.
We do not use Infinitspan, docker command is :
start-dev --http-enabled=true --hostname-strict=false --proxy reencrypt --http-relative-path=/auth
when Spring Gateway invokes grant_type “refresh_token” with refresh token, keycloak returns http 500 with message [invalid_grant] Session doesn’t have required client
in docker we see only events like this
>
> 2024-02-28 17:12:55,773 WARN [org.keycloak.events] (executor-thread-192) type=REFRESH_TOKEN_ERROR, realmId=transguard, clientId=tg-bls, userId=ea131e0f-2570-4e92-a52f-a13427d629f7, ipAddress=10.116.225.8, error=invalid_token, grant_type=refresh_token, refresh_token_type=Offline, refresh_token_id=5e68c56e-0b1d-44e8-846e-bf24c2584eed, client_auth_method=client-secret
This happenes nearly every 30 min, if we refresh browser, everything works normally
As I know this docker was updated from keycloak version 13, but postgresql DB stayes the same
I have exactly the same image installed on other server and with the same config (also image was upgraded from v13), but there is no such issue.
Thanks for advices in advance.