Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Azure Workload Identity - Expired token #1739

Open
hjarraya opened this issue Aug 5, 2024 · 1 comment
Open

Azure Workload Identity - Expired token #1739

hjarraya opened this issue Aug 5, 2024 · 1 comment
Labels
Azure.Identity The azure_identity crate

Comments

@hjarraya
Copy link

hjarraya commented Aug 5, 2024

We are running Azure Identity v0.20.0 and getting this error for a longer-running process in AKS. We are using Workload Identity with our deployments.

 azure_identity::federated_credentials_flow: rsp_body == "{
 "error":"invalid_client",
 "error_description":"AADSTS700024: Client assertion is not within its valid time range.  
   Current time: 2024-08-05T10:07:04.2542067Z, assertion 
   valid from 2024-08-02T18:52:57.0000000Z, expiry time of assertion 2024-08-02T19:52:57.0000000Z.  Review the documentation at https://learn.microsoft.com/entra/identity-platform/certificate-credentials . Trace ID: XXXX-XXXX-XXXX-XXXX-XXXX Correlation ID: XXXX-XXXX-XXXX-XXXX-XXXX Timestamp: 2024-08-05 10:07:04Z",
   "error_codes":[700024],
   "timestamp":"2024-08-05 10:07:04Z", "trace_id":"XXXX-XXXX-XXXX-XXXX-XXXX",
   "correlation_id": "XXXX-XXXX-XXXX-XXXX-XXXX","error_uri": "https://login.microsoftonline.com/error?code=700024"
   }"

The workload identity token is not being refreshed as it is supposed to be.

@RickWinter RickWinter added the Azure.Identity The azure_identity crate label Aug 6, 2024
@erewok
Copy link

erewok commented Aug 6, 2024

I have the same problem. This is occurring on 0.20.0 and did not occur with the previous version of the library: 0.19.0.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Azure.Identity The azure_identity crate
Projects
Status: Untriaged
Status: Untriaged
Development

No branches or pull requests

3 participants