We are periodically seeing failures when trying to request Access Tokens via
the APIM publisher API. An instance of APIM will perform correctly returning
AccessTokens for a time. Occasionally, after restart it will fail when
requesting access tokens via the publisher API. After subsequent restarts the
same instance may or may not then return to operating correctly. The test
scenario in all cases is the same.
Note that if the user (that is being used to request an access token) logs into
the API store of the APIM instance, subsequent requests via the Publisher API
will then succeed. This appears to be reproducible.
On failure the typical stack trace below is seen:
[2016-09-19 09:52:31,163] INFO - TokenMgtDAO Thread pool size for session
persistent consumer : 100
[2016-09-19 09:52:31,262] INFO - OAuthServerConfiguration The default OAuth
token issuer will be used. No custom token generator is set.
[2016-09-19 09:52:31,263] INFO - OAuthServerConfiguration The default Identity
OAuth token issuer will be used. No custom token generator is set.
[2016-09-19 09:52:33,516] WARN - AccessConfiguration Error loading properties
from file: access-log.properties
[2016-09-19 09:52:33,594] INFO - TimeoutHandler This engine will expire all
callbacks after : 120 seconds, irrespective of the timeout action, after the
specified or optional timeout
[2016-09-19 09:52:33,798] ERROR - OAuth2Service Error occurred while issuing
the access token for Client ID : ***********************, User ID
****************, Scope : [apim:api_create] and Grant Type : password
java.lang.NullPointerException
at
org.wso2.carbon.apimgt.impl.utils.APIUtil.getRESTAPIScopesFromConfig(APIUtil.java:5130)
at
org.wso2.carbon.apimgt.keymgt.ScopesIssuer.setScopes(ScopesIssuer.java:100)
at
org.wso2.carbon.apimgt.keymgt.handlers.ExtendedPasswordGrantHandler.validateScope(ExtendedPasswordGrantHandler.java:168)
at
org.wso2.carbon.identity.oauth2.token.AccessTokenIssuer.issue(AccessTokenIssuer.java:226)
at
org.wso2.carbon.identity.oauth2.OAuth2Service.issueAccessToken(OAuth2Service.java:219)
at
org.wso2.carbon.identity.oauth.endpoint.token.OAuth2TokenEndpoint.getAccessToken(OAuth2TokenEndpoint.java:246)
at
org.wso2.carbon.identity.oauth.endpoint.token.OAuth2TokenEndpoint.issueAccessToken(OAuth2TokenEndpoint.java:110)
<http://www.spidasolutions.com/>
Alan Tucker <mailto:a...@spidasolutions.com>
Spida Solutions <http://spidasolutions.com/>
London • Bath • UK
+44 (0)78 0308 4376 <tel:+44-780-308-4376>
+44 (0)12 4981 5081 <tel:+44-12-4981-5081>
www.spidasolutions.com <http://spidasolutions.com/>
_______________________________________________
Dev mailing list
Dev@wso2.org
http://wso2.org/cgi-bin/mailman/listinfo/dev
