Error 400 while introducing JWT Authentication

[Mira_io]

Dear all,

I am currently experiencing problems in the authentication with JWT which I urgently need to overcome.  I have followed the steps described in this article: Qlik Sense: How to set up JWT authentication - Qlik Community - 1716226

My problem is that I get a "400" Error when I try to go to the hub with the new prefix (which is jwt in my case) :

https://{your server name}/jwt/hub/

Do you have any idea what the reason is or how I could solve this? 

I would be very greateful for your help!!

Yours,

Mira

[Ray_Strother]

Hello ,

Please check, that the certificate in the Virtual Proxy and the private key which you use to sign the JWT are matching. You can check this on https://jwt.io if you set the encoding to RS-256 and paste both. Next, check that you provide the exact two attributes in the JWT payload that you configured in the Virtual Proxy as the one holding the userid and userdirectory. Also check the logs under C:\ProgramData\Qlik\Sense\Log\Proxy\Trace

From the below community link:

https://community.qlik.com/t5/App-Development/JWT-Auth-Error-400-Contact-your-system-administrator/t...

[Damien_V · Accepted solution]

Hello @Mira_io 

As Ray also said, you should see why it's failing if you check the Qlik Proxy logs in C:\programdata\qlik\sense\log\proxy\trace\servername_audit_proxy.txt
There should be a line with WARN or ERROR at the exact time when you're trying to access the hub.

If it's error 400, it could also be that the server hostname you're using to access the hub through this virtual proxy is not added to the Host allow list in the virtual proxy settings.

[Mira_io]

Thank you very much for the fast responses!

Indeed I had a problem with the host name. 

I usually access the hub through smth like this: 

https://xyz.mycity.de/hub/

To follow the instructions, I added the prefix jwt:

https://xyz.mycity.de/jwt/hub/

However this did not work. In the Qlik Proxy logs I saw that the server name is only "xyz".

Adding the full name xyz.mycity.de to the Host allowed list had no effect.

Thanks again!

Mira