OIDC Integration with Keycloak Fails: 'Token is Not Valid or Has Expired'

[idrissyou]

Hello,

I'm trying to deploy the Wallet Port /Api and integrate Keycloak for authentication using OIDC.

I successfully deployed both the Wallet and the Keycloak service. To configure the integration, I followed the official documentation:
Walt.ID Keycloak Configuration.

However, upon attempting to log in, I receive the following error:

"Token is not valid or has expired."

Here is my oidc.conf configuration:

publicBaseUrl = "https://dataspace4health.local/wallet/api"
enableOidcLogin = "true"
providerName = "keycloak"
oidcRealm = "https://dataspace4health.local/iam/realms/ds4h"
oidcJwks = "${oidcRealm}/protocol/openid-connect/certs"
oidcScopes = [openid roles]
authorizeUrl = "${oidcRealm}/protocol/openid-connect/auth"
accessTokenUrl = "${oidcRealm}/protocol/openid-connect/token"
logoutUrl = "${oidcRealm}/protocol/openid-connect/logout"
clientId = "waltid_backend"
clientSecret = "Secret"
keycloakUserApi = "https://dataspace4health.local/iam/admin/realms/ds4h/users"
jwksCache = {
  cacheSize = "10"
  cacheExpirationHours = "10"
  rateLimit = {
    bucketSize = "10"
    refillRateMinutes = "1"
  }
}

Steps to Reproduce
Navigate to Wallet UI.

Click on "Connect with OIDC."

The browser redirects to the Keycloak login UI.

Enter valid credentials for a pre-created Keycloak user and click Login.

The system returns the error:

"Token is not valid or has expired."

Expected Behavior
I expect to successfully log in to the Wallet UI after authenticating with Keycloak.

Actual Behavior
After entering valid credentials, I receive the error:

"Token is not valid or has expired."
Wallet Api logs:

Environment
OS Version: Linux
Keycloak Version: docker.io/bitnami/keycloak:21.1.2-debian-11-r27
Wallet UI Version: Latest
Additional Context
Screenshots showing my keycloak config
Client id

Permission list:

Service Account roles:

The issue occurs immediately after authentication.
The Keycloak and Wallet services appear to be running correctly.
I verified that the OIDC configuration follows the official documentation.
I was able to create an account on keycloak from the walet api (endpoint wallet-api/auth/keycloak/create) however I was not able to connect using oidc

Any insights or suggestions would be greatly appreciated!

[alegomes]

Thanks for your report, @idrissyou

I will take a look at it soon.

[]s
Ale