{"action":"created","issue":{"url":"https://api.github.com/repos/cloudfoundry/cf-release/issues/815","labels_url":"https://api.github.com/repos/cloudfoundry/cf-release/issues/815/labels{/name}","comments_url":"https://api.github.com/repos/cloudfoundry/cf-release/issues/815/comments","events_url":"https://api.github.com/repos/cloudfoundry/cf-release/issues/815/events","html_url":"https://github.com/cloudfoundry/cf-release/issues/815","id":111822250,"number":815,"title":"Intermittent UAA failure after migration from cf 217 to 218","user":{"login":"vvraskin","id":7526585,"avatar_url":"https://avatars.githubusercontent.com/u/7526585?v=3","gravatar_id":"","url":"https://api.github.com/users/vvraskin","html_url":"https://github.com/vvraskin","followers_url":"https://api.github.com/users/vvraskin/followers","following_url":"https://api.github.com/users/vvraskin/following{/other_user}","gists_url":"https://api.github.com/users/vvraskin/gists{/gist_id}","starred_url":"https://api.github.com/users/vvraskin/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/vvraskin/subscriptions","organizations_url":"https://api.github.com/users/vvraskin/orgs","repos_url":"https://api.github.com/users/vvraskin/repos","events_url":"https://api.github.com/users/vvraskin/events{/privacy}","received_events_url":"https://api.github.com/users/vvraskin/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":6,"created_at":"2015-10-16T12:30:39Z","updated_at":"2015-10-16T17:08:28Z","closed_at":null,"body":"Hello, \r\n\r\nwe have migrated from cf 217 to 218 and experience problems while trying to create new users. \r\nSince the problem is intermittent, I'm not sure if it is a configuration problem or indeed a bug in uaa. \r\n\r\n# Scenario:\r\n1. Run the command `cf create-user` several times in a row.\r\n\r\n2. After the first execution it returns HTTP 200. \r\n\r\n3. But the second execution returns HTTP code 401 \"Invalid auth token: Invalid token (could not decode): \"\r\n\r\nThis error pattern repeats for every other request. \r\n\r\n# Some more info from our investigation:\r\n\r\nIn the access log of the uaa component we see that 401 code was returned two times having the same timestamp.\r\n\r\nDecoding the jwt that is being marked as invalid did now show any errors. \r\n\r\n\r\n\r\n  \r\n"},"comment":{"url":"https://api.github.com/repos/cloudfoundry/cf-release/issues/comments/148774656","html_url":"https://github.com/cloudfoundry/cf-release/issues/815#issuecomment-148774656","issue_url":"https://api.github.com/repos/cloudfoundry/cf-release/issues/815","id":148774656,"user":{"login":"fhanik","id":607429,"avatar_url":"https://avatars.githubusercontent.com/u/607429?v=3","gravatar_id":"","url":"https://api.github.com/users/fhanik","html_url":"https://github.com/fhanik","followers_url":"https://api.github.com/users/fhanik/followers","following_url":"https://api.github.com/users/fhanik/following{/other_user}","gists_url":"https://api.github.com/users/fhanik/gists{/gist_id}","starred_url":"https://api.github.com/users/fhanik/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/fhanik/subscriptions","organizations_url":"https://api.github.com/users/fhanik/orgs","repos_url":"https://api.github.com/users/fhanik/repos","events_url":"https://api.github.com/users/fhanik/events{/privacy}","received_events_url":"https://api.github.com/users/fhanik/received_events","type":"User","site_admin":false},"created_at":"2015-10-16T17:08:28Z","updated_at":"2015-10-16T17:08:28Z","body":"Ok. the UAA (uaa.log) logs should have the error.\n\nOn Friday, October 16, 2015, vvraskin <notifications@github.com> wrote:\n\n> Here is the decoded MyToken2. Values that I have hidden are marked with\n> 'substituted_value'\n>\n> {\n> \"jti\": \"[substituted_value]\",\n> \"sub\": \"[substituted_value]\",\n> \"scope\": [\n> \"scim.read\",\n> \"cloud_controller.admin\",\n> \"password.write\",\n> \"scim.write\",\n> \"openid\",\n> \"cloud_controller.write\",\n> \"cloud_controller.read\"\n> ],\n> \"client_id\": \"cf\",\n> \"cid\": \"cf\",\n> \"azp\": \"cf\",\n> \"grant_type\": \"password\",\n> \"user_id\": \"[substituted_value]\",\n> \"user_name\": \"MyUser\",\n> \"email\": \"MyUser\",\n> \"iat\": 1445005922,\n> \"exp\": 1445049122,\n> \"iss\": \"http://uaa.my_domain/oauth/token\",\n> \"aud\": [\n> \"scim\",\n> \"openid\",\n> \"cloud_controller\",\n> \"password\",\n> \"cf\"\n> ]\n> }\n>\n> —\n> Reply to this email directly or view it on GitHub\n> <https://github.com/cloudfoundry/cf-release/issues/815#issuecomment-148755607>\n> .\n>\n"}}