[FINERACT-1352] OAuth Bad credentials error

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 1.3.0
• Fix Version/s: 1.6.0
• Component/s: Security
• Assignee: Petri Tuomola
• Reporter: David LEVY
• Created: 05/May/21 12:28
• Updated: 28/Dec/21 03:00
• Resolved: 28/Dec/21 02:59

Description

Hi, 

I am experience different instabilities with Fineract oAuth2

Some of the code I use is legacy and not documented so I am not 100% sure the root cause is Fineract itself, but I didn't find any discussion on it on google, so I try here

 

For all the accounts and all requests I got last week for a few hours this generic error message " Bad credentials"

 
1634699948 [http-bio-443-exec-7] INFO o.s.s.o.p.endpoint.TokenEndpoint - Handling error: InvalidGrantException, Bad credentials
It seems to be a Spring Security error message, but I can't figure out why. The MySQL logs I have show valid results to the queries

Is there a better way to debug ? 
I thought about adding more verbosity in logs : 

 
<loggername="org.apache.fineract.infrastructure.security.filter"level="info"/>
<loggername="org.apache.fineract"level="debug"/><loggername="org.springframework.web"level="info"/><loggername="org.springframework.beans"level="debug"/>
 

For which package I should override the level ? 

thanks ! 

Issue Links

• is fixed by: FINERACT-1012 Spring Security OAuth 2.x to Spring Security 5.2.x