Error while making an /oauth/token request to laravel 7 application

[manjunathpadolkar]

Getting below error in laravel 7 project on php 7.4

InvalidArgumentException: It was not possible to parse your key, reason:  in file /home/vagrant/code/me.api.tech/vendor/lcobucci/jwt/src/Signer/OpenSSL.php on line 90

#0 /home/vagrant/code/me.api.tech/vendor/lcobucci/jwt/src/Signer/OpenSSL.php(47): Lcobucci\JWT\Signer\OpenSSL->validateKey()
#1 /home/vagrant/code/me.api.tech/vendor/lcobucci/jwt/src/Signer/OpenSSL.php(21): Lcobucci\JWT\Signer\OpenSSL->getPrivateKey()
#2 /home/vagrant/code/me.api.tech/vendor/lcobucci/jwt/src/Signer/BaseSigner.php(36): Lcobucci\JWT\Signer\OpenSSL->createHash()
#3 /home/vagrant/code/me.api.tech/vendor/lcobucci/jwt/src/Builder.php(470): Lcobucci\JWT\Signer\BaseSigner->sign()
#4 /home/vagrant/code/me.api.tech/vendor/lcobucci/jwt/src/Builder.php(450): Lcobucci\JWT\Builder->createSignature()
#5 /home/vagrant/code/me.api.tech/vendor/league/oauth2-server/src/Entities/Traits/AccessTokenTrait.php(53): Lcobucci\JWT\Builder->getToken()
#6 /home/vagrant/code/me.api.tech/vendor/league/oauth2-server/src/Entities/Traits/AccessTokenTrait.php(61): Laravel\Passport\Bridge\AccessToken->convertToJWT()
#7 /home/vagrant/code/me.api.tech/vendor/league/oauth2-server/src/ResponseTypes/BearerTokenResponse.php(31): Laravel\Passport\Bridge\AccessToken->__toString()
#8 /home/vagrant/code/me.api.tech/vendor/league/oauth2-server/src/AuthorizationServer.php(202): League\OAuth2\Server\ResponseTypes\BearerTokenResponse->generateHttpResponse()
#9 /home/vagrant/code/me.api.tech/vendor/laravel/passport/src/Http/Controllers/AccessTokenController.php(63): League\OAuth2\Server\AuthorizationServer->respondToAccessTokenRequest()
#10 /home/vagrant/code/me.api.tech/vendor/laravel/passport/src/Http/Controllers/HandlesOAuthErrors.php(24): Laravel\Passport\Http\Controllers\AccessTokenController->Laravel\Passport\Http\Controllers\{closure}()
#11 /home/vagrant/code/me.api.tech/vendor/laravel/passport/src/Http/Controllers/AccessTokenController.php(65): Laravel\Passport\Http\Controllers\AccessTokenController->withErrorHandling()
#12 /home/vagrant/code/me.api.tech/vendor/laravel/framework/src/Illuminate/Routing/ControllerDispatcher.php(48): Laravel\Passport\Http\Controllers\AccessTokenController->issueToken()
#13 /home/vagrant/code/me.api.tech/vendor/laravel/framework/src/Illuminate/Routing/Route.php(239): Illuminate\Routing\ControllerDispatcher->dispatch()
#14 /home/vagrant/code/me.api.tech/vendor/laravel/framework/src/Illuminate/Routing/Route.php(196): Illuminate\Routing\Route->runController()
#15 /home/vagrant/code/me.api.tech/vendor/laravel/framework/src/Illuminate/Routing/Router.php(685): Illuminate\Routing\Route->run()
#16 /home/vagrant/code/me.api.tech/vendor/laravel/framework/src/Illuminate/Pipeline/Pipeline.php(128): Illuminate\Routing\Router->Illuminate\Routing\{closure}()
#17 /home/vagrant/code/me.api.tech/vendor/laravel/framework/src/Illuminate/Routing/Middleware/ThrottleRequests.php(59): Illuminate\Pipeline\Pipeline->Illuminate\Pipeline\{closure}()
#18 /home/vagrant/code/me.api.tech/vendor/laravel/framework/src/Illuminate/Pipeline/Pipeline.php(167): Illuminate\Routing\Middleware\ThrottleRequests->handle()
.tech/app/Http/Middleware/PageAnalytics.php(32): Illuminate\Pipeline\Pipeline->Illuminate\Pipeline\{closure}()
#20 /home/vagrant/code/me.api..tech/vendor/laravel/framework/src/Illuminate/Pipeline/Pipeline.php(167): App\Http\Middleware\PageAnalytics->handle()
#21 /home/vagrant/code/me.api.tech/app/Http/Middleware/ConvertedUser.php(32): Illuminate\Pipeline\Pipeline->Illuminate\Pipeline\{closure}()
#22 /home/vagrant/code/me.api.tech/vendor/laravel/framework/src/Illuminate/Pipeline/Pipeline.php(167): App\Http\Middleware\ConvertedUser->handle()
#23 /home/vagrant/code/me.api.tech/vendor/laravel/framework/src/Illuminate/Pipeline/Pipeline.php(103): Illuminate\Pipeline\Pipeline->Illuminate\Pipeline\{closure}()
#24 /home/vagrant/code/me.api.tech/vendor/laravel/framework/src/Illuminate/Routing/Router.php(687): Illuminate\Pipeline\Pipeline->then()
#25 /home/vagrant/code/me.api.tech/vendor/laravel/framework/src/Illuminate/Routing/Router.php(662): Illuminate\Routing\Router->runRouteWithinStack()
#26 /home/vagrant/code/me.api.tech/vendor/laravel/framework/src/Illuminate/Routing/Router.php(628): Illuminate\Routing\Router->runRoute()
#27 /home/vagrant/code/me.api.tech/vendor/laravel/framework/src/Illuminate/Routing/Router.php(617): Illuminate\Routing\Router->dispatchToRoute()
#28 /home/vagrant/code/me.api.tech/vendor/laravel/framework/src/Illuminate/Foundation/Http/Kernel.php(165): Illuminate\Routing\Router->dispatch()
#29 /home/vagrant/code/me.api.tech/vendor/laravel/framework/src/Illuminate/Pipeline/Pipeline.php(128): Illuminate\Foundation\Http\Kernel->Illuminate\Foundation\Http\{closure}()
#30 /home/vagrant/code/me.api.tech/vendor/fruitcake/laravel-cors/src/HandleCors.php(37): Illuminate\Pipeline\Pipeline->Illuminate\Pipeline\{closure}()
#31 /home/vagrant/code/me.api.tech/vendor/laravel/framework/src/Illuminate/Pipeline/Pipeline.php(167): Fruitcake\Cors\HandleCors->handle()
#32 /home/vagrant/code/me.api.tech/vendor/fideloper/proxy/src/TrustProxies.php(57): Illuminate\Pipeline\Pipeline->Illuminate\Pipeline\{closure}()
#33 /home/vagrant/code/me.api.tech/vendor/laravel/framework/src/Illuminate/Pipeline/Pipeline.php(167): Fideloper\Proxy\TrustProxies->handle()
#34 /home/vagrant/code/me.api.tech/vendor/laravel/framework/src/Illuminate/Foundation/Http/Middleware/TransformsRequest.php(21): Illuminate\Pipeline\Pipeline->Illuminate\Pipeline\{closure}()
#35 /home/vagrant/code/me.api.tech/vendor/laravel/framework/src/Illuminate/Pipeline/Pipeline.php(167): Illuminate\Foundation\Http\Middleware\TransformsRequest->handle()
#36 /home/vagrant/code/me.api.tech/vendor/laravel/framework/src/Illuminate/Foundation/Http/Middleware/TransformsRequest.php(21): Illuminate\Pipeline\Pipeline->Illuminate\Pipeline\{closure}()
#37 /home/vagrant/code/me.api.tech/vendor/laravel/framework/src/Illuminate/Pipeline/Pipeline.php(167): Illuminate\Foundation\Http\Middleware\TransformsRequest->handle()
#38 /home/vagrant/code/me.api.tech/vendor/laravel/framework/src/Illuminate/Foundation/Http/Middleware/ValidatePostSize.php(27): Illuminate\Pipeline\Pipeline->Illuminate\Pipeline\{closure}()
#39 /home/vagrant/code/me.api.tech/vendor/laravel/framework/src/Illuminate/Pipeline/Pipeline.php(167): Illuminate\Foundation\Http\Middleware\ValidatePostSize->handle()
#40 /home/vagrant/code/me.api.tech/vendor/laravel/framework/src/Illuminate/Foundation/Http/Middleware/CheckForMaintenanceMode.php(63): Illuminate\Pipeline\Pipeline->Illuminate\Pipeline\{closure}()
#41 /home/vagrant/code/me.api.tech/vendor/laravel/framework/src/Illuminate/Pipeline/Pipeline.php(167): Illuminate\Foundation\Http\Middleware\CheckForMaintenanceMode->handle()
#42 /home/vagrant/code/me.api.tech/vendor/laravel/framework/src/Illuminate/Pipeline/Pipeline.php(103): Illuminate\Pipeline\Pipeline->Illuminate\Pipeline\{closure}()
#43 /home/vagrant/code/me.api.tech/vendor/laravel/framework/src/Illuminate/Foundation/Http/Kernel.php(140): Illuminate\Pipeline\Pipeline->then()
#44 /home/vagrant/code/me.api.tech/vendor/laravel/framework/src/Illuminate/Foundation/Http/Kernel.php(109): Illuminate\Foundation\Http\Kernel->sendRequestThroughRouter()
#45 /home/vagrant/code/me.api.tech/public/index.php(55): Illuminate\Foundation\Http\Kernel->handle()
#46 {main}

[lcobucci]

@manjunathpadolkar it seems like you don't have a valid key configured...

Have you checked that?

[manjunathpadolkar]

As I tried doing more research on this I notice that there are 2 env variables namely SSL_KEY_LOCATION and SSL_CERT_LOCATION

I created a public and private key on my machine by following this article https://kentakodashima.medium.com/generate-pem-keys-with-openssl-on-macos-ecac55791373

And after installing private and public key, I added them in .env file as show below

By doing so I am now getting 200 status code but I don't get the token from the server. See the response from sever

[manjunathpadolkar]

@manjunathpadolkar I don't know very much about how passport uses this lib. Maybe you should debug your app or check with the maintainers of that package

No problem @lcobucci I will try to debug. Appreciate your feedback!

[manjunathpadolkar]

@manjunathpadolkar I don't know very much about how passport uses this lib. Maybe you should debug your app or check with the maintainers of that package

No problem @lcobucci I will try to debug. Appreciate your feedback!

[Ocramius]

@manjunathpadolkar just making sure: you are rotating those secrets after having posted them here, right?

As for debugging, try figuring out what happens here:

#1 /home/vagrant/code/me.api.tech/vendor/lcobucci/jwt/src/Signer/OpenSSL.php(21): Lcobucci\JWT\Signer\OpenSSL->getPrivateKey()

What is the key string (or file) passed to OpenSSL?

[manjunathpadolkar]

Yes @Ocramius , I did try to change the key after my first post so you see different client_secret keys in my postman screenshots.

The problem is with the laravel 7 implementation of passport. When we installed Passport package few years back it was on ^8.4 version and it was using lcobucci/jwt package. But now when I tried to install a fresh laravel 7 app, They have upgraded the passport package to ~9.0 in which I think they have fixed this problem.

For me the solution was to upgrade Passport package to ~9.0 and to remove the dependency of lcobucci/jwt in my composer.json file

[Ocramius]

Also check:

jwt/src/Signer/OpenSSL.php

Lines 99 to 104 in a8acedb

	if (is_bool($key)) {
	$error = openssl_error_string();
	assert(is_string($error));
	throw InvalidKeyProvided::cannotBeParsed($error);
	}

At this point of the execution, your $key is false

[Ocramius]

I converted this to a discussion, since it's not a bug/issue.

[manjunathpadolkar]

I think I found the solution for this issue. It looks like it was a Laravel Internal issue. My laravel app is 7.0 and passport was installed on it with a version of "laravel/passport": "^8.4" and I think passport 8.4 is dependent on lcobucci/jwt package for some reason Laravel was throwing an error.

Solution: I upgraded the passport package to "laravel/passport": "~9.0" and removed lcobucci/jwt package with this update it worked fine.